Security GRC Specialist (Cybersecurity)

Location: Mountain View, USA

Base pay: $164,000–$282,000 per year, depending on geographic market, knowledge, skills, and experience.

Company

hirify.global is a large global public commerce company building high-tech services for shopping, eating, and living, with a startup culture and resources for large-scale growth.

What you will do

• Develop and operationalize continuous, evidence-based cybersecurity risk management methodologies.
• Build and maintain data-driven risk models, indicators, dashboards, risk registers, scoring algorithms, and risk acceptance governance.
• Correlate technical risk signals, control effectiveness data, and business impact to prioritize risks and inform treatment decisions.
• Partner with Security and Engineering teams on runtime risk monitoring, automated risk signals, and security telemetry integration.
• Collaborate with AI GRC and Control Assurance to align AI and cybersecurity governance and incorporate assurance findings into risk assessments.
• Identify systemic risk patterns and recurring control weaknesses and provide recommendations to improve the organization’s risk posture.

Requirements

• 6+ years of relevant experience in cybersecurity, technology risk management, security engineering, or cybersecurity GRC.
• Strong expertise in cybersecurity risk management, security governance, or technology risk in high-scale technology environments.
• Hands-on experience with continuous risk monitoring, runtime risk assessment, security telemetry, risk analytics, or data-driven control effectiveness measurement.
• Experience developing or implementing risk management methodologies, continuous monitoring capabilities, or data-driven security risk programs.
• Ability to translate technical security signals, cloud vulnerabilities, control deficiencies, telemetry, control performance, or architectural data into business risk insights.
• Deep understanding of cybersecurity control frameworks, risk quantification and assessment methodologies, residual risk management, and relevant statutory or regulatory requirements.
• Working knowledge of NIST CSF, NIST AI RMF, ISO 42001, and ISO 27001.
• Strong analytical, problem-solving, and cross-functional stakeholder management skills, with the ability to influence engineering teams and drive technical governance without direct authority.
• Bachelor’s degree in a related field or equivalent professional experience.

Nice to have

• Technical background in security engineering, cloud security, application security, security architecture, or security analytics.
• Application or product security experience, including Static and Dynamic Application Security Testing.
• Experience writing Java/Spring Boot applications in AWS and Kubernetes environments.
• Experience with security testing tools, container scanning pipelines, open-source software vulnerabilities, remediation pipelines, and Kubernetes security.
• Experience leading or mentoring engineers to build a security or infrastructure service from scratch.
• Experience identifying, testing, and remediating vulnerabilities, including OWASP Top 10 and CWE/SANS Top 25 vulnerabilities, and writing exploits and verification.

Culture & Benefits

• Startup culture with the resources of a large global public company and opportunities to drive new initiatives.
• Annual bonus of 0–20% of base salary.
• Medical, dental, vision, life, AD&D, disability, employee assistance, FSA, and HSA benefits.
• 401(k) plan with company match, 18–21 days of paid time off based on tenure, 12 paid holidays, and paid parental leave.
• Pre-tax commuter benefits and a free electric car charging station in Mountain View.

Hiring process

• Application review, job fit interview, focus interview, and offer.
• Schedules and results are communicated by email; the process may vary according to the role and scheduling circumstances.