Head of Security (AI)

Location: San Francisco, CA; on-site

Company

hirify.global builds an AI workflow automation platform for healthcare operators, serving hospitals, health systems, pharmacies, and payors.

What you will do

• Define and execute the company-wide security strategy, roadmap, operating model, and organizational structure.
• Hire, mentor, and lead a high-performing security organization.
• Establish secure software development lifecycle practices, threat modeling, secure architecture reviews, penetration testing, vulnerability management, and security standards for AI-powered products and ML systems.
• Own AWS cloud security, including IAM, secrets management, endpoint security, infrastructure hardening, network security, monitoring, logging, detection, and incident response.
• Lead compliance, governance, vendor risk management, customer security reviews, and enterprise due diligence across SOC 2, HIPAA, and HITRUST programs.
• Advise executive leadership and the Board while building a security-first culture through education and partnership.

Requirements

• 15+ years of progressive experience in cybersecurity, information security, cloud security, or infrastructure security.
• 5+ years leading security organizations at technology companies and experience building security programs from the ground up.
• Strong technical background in modern cloud environments, ideally AWS, with expertise in application security, cloud security, IAM, DevSecOps, vulnerability management, and incident response.
• Experience securing enterprise SaaS platforms and working with healthcare security and compliance frameworks, including HIPAA and SOC 2.
• Experience partnering with Engineering to establish secure development practices and communicating with executives, engineers, customers, and auditors.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience.

Nice to have

• Security leadership experience at a startup or high-growth technology company.
• HITRUST certification experience and experience securing AI/ML platforms or modern data infrastructure.
• Experience with container security, Infrastructure as Code, and cloud-native architectures.
• CISSP, CISM, CCSP, GIAC, or comparable certification.

Culture & Benefits

• Mission-driven team focused on improving healthcare operations and patient outcomes.
• Remote-first organization with office presence in San Francisco and New York; R&D roles follow a hybrid model with two days per week in the San Francisco office.
• Medical, dental, and vision insurance with family participation.
• 401(k) with company match, equity for full-time employees, unlimited PTO, and paid parental leave.
• Daily lunch stipend, wellness stipend, and commuter benefits for SF and NYC-based employees.