Lead IT, DevOps & Security (SOC 2)

TL;DR

Lead IT, DevOps & Security (SOC 2/Terraform): Leading the execution and expansion of the company's security and compliance program with an accent on automated controls and "compliance as code". Focus on operationalizing Trust Services Criteria (Confidentiality, Availability), building automated security tooling, and managing cloud identity infrastructure via Terraform.

Location: Hybrid (Kanata, Ontario, Canada)

Compensation: $110,000 - $140,000 CAD

Company

hirify.global is a technology and managed services company specializing in customer experience ecosystems with a Fortune 1000 customer base.

What you will do

• Expand the SOC 2 Type 2 program to include Confidentiality and Availability Trust Services Criteria.
• Manage the auditor relationship and ensure continuous, audit-ready evidence collection using Vanta.
• Lead security engineering, vulnerability management, and incident response through an automation-first lens.
• Oversee product and corporate DevOps, including CI/CD pipelines and application infrastructure.
• Manage cloud identity and security infrastructure as code using Terraform.
• Directly manage and develop IT and DevOps staff as a player-coach.

Requirements

• Must be based in or able to work hybrid in Kanata, Ontario.
• Demonstrable experience leading or driving SOC 2 Type 2 programs.
• Proven track record in people leadership managing IT, DevOps, or security teams.
• Hands-on background in security engineering, policy, and incident response.
• Proficiency with Terraform or equivalent IaC for managing cloud IAM (especially Microsoft Entra ID).
• Ability to articulate technology strategy to both technical teams and executive leadership.

Nice to have

• Experience securing Windows (Intune) and macOS (Jamf) fleets.
• Hands-on administration of Microsoft Entra ID and Google Workspace in a corporate setting.

Culture & Benefits

• Player-coach environment where leadership is combined with hands-on implementation.
• Ownership of the security and compliance roadmap during a scaling phase.
• Engineering-centric approach to IT and compliance ("compliance as code").
• Opportunity to work with a high-profile Fortune 1000 customer base.