Associate Security Program Manager (Cybersecurity)

Location: US/LATAM - Remote; remote-first and global hiring where hirify.global can legally engage talent directly or via an EOR partner.

Salary: $35,000–$65,000 annual base salary, with equity and benefits excluded from the range. Offers are benchmarked to the candidate's market and may be higher or lower than the US baseline.

Company

hirify.global is a cybersecurity and compliance platform helping companies build, manage, and monitor security programs and achieve SOC 2 and ISO 27001 compliance.

What you will do

• Review client evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and sufficiency.
• Perform control-level QA and pre-audit reviews, identify evidence gaps, and document actionable fixes.
• Maintain QA standards and methodologies, contribute to guidance documents, track audit-readiness metrics, and provide feedback to product and engineering.
• Join consultation calls to understand client security posture, infrastructure, compliance requirements, and goals.
• Support Security Program Managers in building and implementing technical, operational, and administrative controls, including policies, procedures, configurations, and software integrations.
• Translate security concepts for technical and non-technical stakeholders and coordinate with auditors.

Requirements

• 3+ years of experience in information security, compliance, or audit, including GRC, IT or compliance auditing, security operations, security advisory, or security-adjacent customer success or IT support.
• Working knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI, including how controls map to real infrastructure and operations.
• Familiarity with cloud and infrastructure technologies such as AWS, Azure, GCP, Kubernetes, Docker, or Terraform, with the ability to learn new technologies quickly.
• Experience reviewing or preparing evidence for compliance audits.
• Client-facing or stakeholder-facing experience, strong organization, and project management instincts.
• Excellent attention to detail, a quality-control mindset, clear written communication, and confident verbal communication.
• Ability to switch between focused review work and a high-volume, high-interruption client queue.
• Ability to manage multiple client engagements in a fast-moving startup environment while working autonomously and handling ambiguity.

Nice to have

• Progress toward or possession of CISA, Security+, CISSP Associate, CISM, or ISO 27001 Lead Auditor/Implementer certification.
• Experience with compliance automation platforms.
• Background in customer success, IT support, or technical support.
• Startup experience, either working at a startup or consulting for one.

Culture & Benefits

• Remote-first work culture with global hiring through direct employment or EOR arrangements where legally available.
• Impact, autonomy, personal accountability, clear communication, and a bias for action are valued.
• Comprehensive health and wellness benefits.
• 20 days of paid time off per year plus 8 floating holidays.
• Team off-sites, including locations such as Amsterdam and Italy.
• Competitive compensation and equity.