Director of Information Security (Healthcare)

Location: New York, NY; must live within a 75-minute commute of the NYC office near Union Square and work in-office 4 days per week.

Salary: $200,000–$250,000 per year in target base compensation, plus a performance bonus.

Company

hirify.global provides personalized virtual behavioral healthcare for people with complex mental health, substance use, and eating disorder needs.

What you will do

• Translate CISO and executive strategy into security priorities, roadmaps, metrics, operating rhythms, and measurable outcomes.
• Lead, hire, coach, and develop the Information Security team, including performance management and organizational planning.
• Provide leadership across security engineering, architecture, security operations, incident response, identity, cloud, application security, and data protection.
• Partner with IT and Engineering to embed secure-by-design practices, automation, and modern engineering controls.
• Lead security incident readiness and response with internal teams, managed security providers, and external partners.
• Assess and prioritize business-impacting security risks and integrate security into decisions across Compliance, Legal, Privacy, Product, IT, and Engineering.

Requirements

• 10+ years of progressive experience in information security, security engineering, security operations, or related disciplines.
• 3+ years of experience leading security teams or major security programs.
• Experience building, scaling, or materially improving an enterprise information security program.
• Broad technical experience across identity, endpoint, SaaS, cloud, application security, security operations, and data protection.
• Strong understanding of security architecture, control design, incident response, risk management, Zero Trust, least privilege, identity-centric security, and secure-by-design principles.
• Experience operating in a regulated environment and translating regulatory requirements into practical controls.
• Strong leadership, communication, judgment, and cross-functional collaboration skills.
• Ability to operate effectively in a high-growth environment with significant change and competing priorities.
• Must live within a 75-minute commute of the NYC office and work in-office 4 days per week.

Nice to have

• Experience in healthcare, financial services, or another highly regulated industry.
• Experience supporting HIPAA, SOC 2, NIST, ISO 27001, or similar frameworks.
• Experience leading multidisciplinary security teams.
• Experience with enterprise identity, endpoint, cloud, SIEM, MDR, DLP, and application security platforms.
• Experience securing enterprise AI tools, LLM platforms, or AI-enabled workflows.
• CISSP, CISM, CCSP, or equivalent experience.

Culture & Benefits

• Comprehensive benefits for full-time, exempt employees.
• Performance bonus in addition to base compensation.
• Potential stock options and other company-sponsored benefits.
• Values include connection, curiosity, evidence-based decision-making, urgency, and persistence.
• Equal opportunity workplace focused on belonging and diverse perspectives.