Senior Information Security Analyst (Cybersecurity)

TL;DR

Senior Information Security Analyst (Cybersecurity): Managing security risk and compliance frameworks (SOC, ISO 27001, PCI-DSS) to strengthen trust in the social good industry with an accent on risk mitigation, remediation, and third-party assessments. Focus on identifying business risks, operational deficiencies, and implementing actionable security recommendations.

Location: Remote (Must be based in the United States)

Salary: $100,000 - $120,000

Company

hirify.global provides end-to-end technology solutions to help nonprofit organizations and corporations maximize their social impact.

What you will do

• Facilitate security examinations for frameworks including SOC, ISO 27001, and PCI-DSS.
• Perform technical risk assessments of third-party suppliers' security and privacy controls.
• Identify business risks, operational deficiencies, and regulatory gaps, providing actionable mitigation solutions.
• Maintain the vendor risk management register, controls, and risk tracking.
• Manage enterprise-wide security awareness, role-based training, and phishing simulation programs.
• Collaborate with control owners and auditors to ensure compliance requests are completed timely.

Requirements

• 6+ years of experience performing risk and compliance activities.
• Must have current US employment authorization (no sponsorship provided).
• Proficiency with GRC, ticketing, and project management software.
• Excellent research, analytical, and verbal/written communication skills.
• Professional certifications such as CRISC, CISA, CISSP, or CISM.

Culture & Benefits

• Mission-driven environment focused on increasing global social giving.
• Inclusive and equitable culture fostering belonging and meaningful impact.
• Comprehensive benefits package supporting health, well-being, and growth.
• Opportunity to work with AI-powered tools to solve real-world human challenges.