Head of Security and IT (AI)

Location: Remote, United States

Company

hirify.global operates a purchase intelligence and incentives platform that helps businesses attract, understand, and incentivize consumers through digital reward programs.

What you will do

• Lead security and compliance programs, including the SOX/SOC 2 control environment, GUARD, external audits, internal audits, and bank-partner risk assessments.
• Oversee identity and access management across Google Workspace, Okta, and ConductorOne, enforcing and evidencing least-privilege access.
• Maintain security for the AWS production environment, including EKS, Lambda, Terraform, GitHub Actions, CloudTrail, GuardDuty, Wiz, and managed detection and response tooling.
• Enable safe, effective AI adoption across technical and non-technical teams, including compliance evidence gathering, access reviews, and incident response.
• Ensure secure IT operations for a remote workforce using Windows and macOS, including device management, BYOD mobile security, and help desk support.
• Manage and develop a five-person team, partner with the CTO, and communicate security risk and program status to executives, the board, auditors, and banking partners.

Requirements

• 8+ years of security and/or IT leadership experience, including 3+ years of direct people management.
• Hands-on expertise in at least two areas: security engineering, security architecture, identity and access management, or vulnerability management.
• Direct ownership or substantial support of SOX and/or SOC 2 compliance programs, including external auditor engagement.
• Experience with modern IAM tools such as Okta or Google Workspace and cloud security platforms such as Wiz or comparable CNAPP/CSPM solutions.
• Working knowledge of AWS and Terraform/IaC concepts, plus the ability to translate technical risk for executives, board members, and bank auditors.
• Ability to work fully remotely from the United States; familiarity with or willingness to work in a macOS and Google Workspace environment is required.

Nice to have

• Experience in fintech, adtech, or another environment with significant bank or third-party compliance oversight.
• Familiarity with Databricks, EKS, or managed SOC/MDR providers such as Expel.
• CISSP, CISM, or an equivalent security or compliance certification.

Culture & Benefits

• Lean, high-trust environment focused on judgment, accountability, urgency, and empowerment.
• Flexible paid time off and company holidays.
• Medical, dental, and vision insurance from the first day.
• 401(k) plan with company match and student loan debt repayment option, plus an employee stock purchase plan.
• Educational assistance, lifestyle spending account, and Calm app subscriptions.