Cybersecurity Engineer II (GRC)

Location: Remote across the United States, with travel to and onsite work at client, temporary, or corporate office locations as business needs require

Salary: $84,000–$132,300 per year, based on experience

Company

hirify.global provides technology-enabled revenue cycle management solutions and point solutions for hospitals and affiliated physician groups across the United States.

What you will do

• Own and maintain the cybersecurity risk register, including risk identification, assessment, tracking, quantification, and reporting.
• Design and maintain automated control monitoring and audit evidence collection processes to support continuous compliance.
• Support incident response governance, investigations, remediation planning, and compliance reporting.
• Evaluate new systems, technologies, infrastructure, and cloud changes against security frameworks and CIS benchmarks.
• Collaborate with cybersecurity, engineering, infrastructure, cloud, and business stakeholders to remediate control deficiencies.
• Maintain risk assessments, control narratives, policies, procedures, and audit evidence repositories.

Requirements

• Associate degree in cybersecurity, information technology, information systems, computer science, or a related field, or equivalent relevant experience.
• 3–5 years of experience in cybersecurity, information security, governance, risk management, compliance, IT audit, or a related discipline.
• Experience supporting cybersecurity risk programs, compliance initiatives, audits, security control assessments, and enterprise security frameworks.
• Knowledge of GRC administration, risk register management, security control design and monitoring, audit support, and third-party risk management.
• Strong analytical, problem-solving, documentation, process improvement, and stakeholder communication skills.
• Must be able to work remotely within the United States and travel to and work onsite at client, temporary, or corporate office locations as required.

Nice to have

• CompTIA Security+, CRISC, CISA, or another relevant cybersecurity, risk, audit, or compliance certification.
• Experience with CIS Benchmarks, security configuration standards, control automation, and continuous compliance monitoring.
• Openness to using AI to improve processes and reduce friction.

Culture & Benefits

• Benefits include healthcare, paid time off, retirement, and well-being programs.
• Professional development includes a relevant professional certification and tuition reimbursement.
• Collaborative culture focused on growth, innovation, work-life flexibility, and recognition.
• Quarterly and annual incentive programs are available to employees.