Head of Security

Location: Remote

Company

hirify.global builds enterprise tools for data transformation, de-identification, synthesis, and subsetting, enabling safe synthetic data for software development, model training, and AI implementation.

What you will do

• Own the SOC 2 program end to end, including scoping, evidence collection, control remediation, and the auditor relationship.
• Align security practices with GDPR, HIPAA, and customer contract commitments while partnering with legal on security redlines.
• Embed security into the development lifecycle and run vulnerability management, penetration testing, and remediation tracking.
• Secure AWS, GCP, and Azure environments through IAM, configuration management, logging, and hardening.
• Lead customer-facing security work, including questionnaires, RFP responses, and calls with customer CISOs.
• Run corporate security and IT, identity and access management, vendor risk management, endpoint security, EDR monitoring, incident response, and employee AI-use governance.

Requirements

• Several years leading security at a B2B software company, with experience building security programs.
• End-to-end ownership of SOC 2 audits and working knowledge of GDPR and HIPAA.
• Hands-on experience securing AWS, GCP, and Azure, including reading IAM policies, identifying misconfigurations, and fixing them with engineering.
• Experience embedding security in the development lifecycle and operating vulnerability management.
• Customer-facing experience handling extensive security questionnaires, CISO discussions, and legal security redlines.
• Experience running endpoint management, EDR, incident response, IAM, vendor risk management, and corporate security and IT.
• Practical use of AI tools, understanding of their risks, and ability to create effective guardrails for AI platforms, coding assistants, and MCP connectors.
• Ability to make independent, risk-based decisions and communicate clearly with engineers and executives.

Nice to have

• Experience in data infrastructure, privacy, or AI companies.
• Experience selling into regulated healthcare or financial services industries.
• Experience with ISO 27001, HITRUST, or FedRAMP.
• Experience securing customer-deployed software alongside SaaS products.
• Experience at an early-stage or fast-growing company.

Culture & Benefits

• Security is treated as part of the product and the role works directly with founders, engineering, DevOps, sales, and legal.
• Opportunity to shape security strategy, customer commitments, and AI governance at a company working with sensitive training and enterprise data.
• Competitive compensation and equity.
• Initial priorities include taking over the security questionnaire queue, owning the SOC 2 program, creating a prioritized security roadmap, and implementing AI-use policies.