Director of Cybersecurity

Location: Remote WA, United States of America. Applicants must be permanently authorized to work in the United States; visa sponsorship is not available.

Salary: $171,191.48–$285,319.13 annually.

Company

hirify.global is a U.S. automotive startup building affordable, customizable, connected vehicles and manufacturing them in the USA.

What you will do

• Define hirify.global’s cybersecurity strategy, multi-year roadmap, risk priorities, policy framework, governance model, security budget, and reporting for the CTO, executives, and board.
• Lead compliance and audit readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations.
• Build and develop the security team, security awareness program, partnerships, detection and response capabilities, threat intelligence, and incident response plans across IT, cloud, OT, and vehicle environments.
• Establish vehicle and product cybersecurity practices including TARA, secure over-the-air updates, telematics and backend security, key and certificate management, supplier requirements, vulnerability disclosure, and product security incident response.
• Set standards for application, cloud, enterprise systems, identity, endpoint, email, data, privacy, and third-party security across AWS, Azure, edge platforms, SAP S/4HANA, WMS, data platforms, and AI/LLM tools.
• Secure manufacturing and OT environments at the Warsaw plant and future sites through IEC 62443-aligned segmentation, asset inventory, secure remote access, monitoring, and production-safe incident response.

Requirements

• 10+ years of information security or cybersecurity experience, including at least 5 years leading security teams or programs.
• Experience building or substantially maturing security programs across multiple domains rather than a single function.
• Hands-on leadership of compliance efforts involving SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171, including real audits and certifications.
• Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor operations.
• Strong technical grounding in cloud security, preferably AWS, identity and access management, application security, and security operations, with enough depth to evaluate architecture and challenge vendors.
• Track record of translating security risk into business terms and making pragmatic, prioritized tradeoffs in a fast-moving environment.
• Strong written and verbal communication, including executive and board presentations, with a collaborative, low-ego approach.

Nice to have

• Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System.
• Experience establishing security for a greenfield plant, new company, or rapidly scaling business.
• Consumer ecommerce and payments security experience, including PCI-DSS scoping and consumer privacy regulations.
• Experience with CMMC, ITAR/EAR, or government and defense contracting requirements.
• Familiarity with data platforms and AI/ML or LLM-based applications.
• Certifications such as CISSP, CISM, GICSP, or CCSP.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.

Culture & Benefits

• Remote work based in Washington, United States.
• Medical, dental, vision, life, and disability insurance.
• Vacation and 401(k).
• Potential equity participation and discretionary annual incentive eligibility.
• Culture centered on safety, customer focus, teamwork, continuous improvement, resourcefulness, respectful collaboration, and positive legacy.
• Equal employment opportunity and reasonable accommodation for qualified applicants with disabilities.