Director of Information Security (Cybersecurity)

Location: On-site in Portland, Oregon, with regular presence in company facilities 4+ days per week. Occasional domestic and international travel may be required. Relocation assistance to Portland is available if needed.

Salary: $200,000–$275,000 per year, plus equity.

Company

hirify.global is a Portland-based public benefit corporation developing renewable energy and ocean technologies for sustainable energy generation and renewable fuels.

What you will do

• Own the technical information security roadmap across corporate, cloud, engineering, and enterprise systems.
• Design and implement secure architecture for identity, endpoints, networks, SaaS, and cloud environments.
• Build security controls into source control, CI/CD, infrastructure as code, secrets management, logging, and access review workflows.
• Define identity and access management patterns, including SSO, MFA, RBAC, privileged access, and lifecycle management.
• Lead vulnerability management, remediation, detection and response, incident playbooks, and forensic readiness.
• Secure enterprise systems supporting engineering release, manufacturing, supply chain, and operations while advising leadership during incidents.

Requirements

• 8+ years of experience in security engineering, infrastructure security, platform security, or a related field.
• Hands-on experience securing cloud and enterprise environments, including identity, networking, endpoints, SaaS, and monitoring systems.
• Experience operating security controls across CI/CD pipelines, source control platforms, infrastructure as code, and developer tooling.
• Deep knowledge of SSO, MFA, RBAC, provisioning and deprovisioning, and privileged access design.
• Experience leading vulnerability management and remediation programs and designing security architectures in complex environments.
• Comfort working on-site across offices, labs, and industrial environments in Portland is required.

Nice to have

• Experience as an early security hire at a scaling startup.
• Experience securing hardware engineering, manufacturing, laboratory, or industrial environments.
• Knowledge of SOC 2, ISO 27001, zero trust, device trust, endpoint management, SIEM, EDR, MDM, and infrastructure policy enforcement.
• Experience securing PLM, ERP, MRP, MES, QMS, and related integrations.
• Background in incident response, threat modeling, tabletop exercises, or regulated and mission-critical industries.

Culture & Benefits

• Hands-on role combining individual contribution with strategic security leadership.
• Flexible paid time off.
• Company-paid gold-level PPO health insurance for employees, partners, and dependents.
• Company-paid dental, vision, and disability insurance.
• Access to 401(k), health FSA, and dependent care FSA accounts.
• Equity participation and relocation assistance.