R&D Security Risk Manager (AI)

Location: San Jose, CA, US; onsite presence is required for in-person work-related events, trainings, and meetings. A flexible workplace arrangement may allow remote work up to two days per week. Domestic and/or international travel may be required, up to 10%.

Base annual salary: $141,563–$207,625.

Company

hirify.global develops lithography systems used in advanced semiconductor manufacturing and operates in a regulated global environment involving sensitive intellectual property, controlled technologies, and cross-border collaborations.

What you will do

• Perform GRC intake and risk scoping for business-led projects, lead architectural design reviews, recommend mitigating controls, and drive implementation.
• Assess risks to R&D information assets in collaboration with security disciplines, IT, Legal, Export Control, Customer Support, and global security centers.
• Conduct information security risk assessments and coordinate penetration testing for applications, platforms, and processes; register risks and track remediation.
• Ensure compliance with security policies, standards, and export-controlled technology regulations.
• Represent US regional requirements in global security initiatives and support adoption across R&D.
• Develop and deliver security awareness initiatives that promote secure behaviors and a strong security culture.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity/Risk, Audit, or equivalent related work experience; a master’s degree is a plus.
• Minimum 5 years of relevant experience in information security risk management, with a strong IT or IT security background.
• Experience with ISO 27001, NIST frameworks, industry standards, and security best practices.
• Experience working in matrixed, multidisciplinary environments with globally distributed teams across multiple regions and time zones.
• General understanding of networking, communication protocols, firewalls, operating systems, and foundational information security principles.
• Experience with cloud technologies and cloud security principles, preferably Microsoft Azure.
• Experience with AI models, agents, and related security, governance, and technology standards.
• Strong communication, negotiation, stakeholder-management, analytical, problem-solving, ownership, and accountability skills.
• Must be legally authorized to access US-controlled technology before beginning work.

Nice to have

• Master’s degree.
• CRISC, CISSP/CISM, or CISA certification.
• Experience working with IT and R&D organizations and understanding of DevOps practices and environments.

Culture & Benefits

• Onsite collaboration with a flexible arrangement of up to two remote days per week where applicable.
• Medical, dental, vision, and basic life insurance for employees and families.
• Company 401(k) plan.
• Eight hours of vacation leave per month and 13 paid holidays annually.
• Equal opportunity and inclusive workplace; reasonable accommodations are available for applicants and employees with disabilities.

Hiring process

• All new hirify.global jobs have a minimum application deadline of 10 days.
• Salary placement is determined through interviews and assessment of job-related skills, education, experience, certifications, abilities, and internal pay alignment.