Head of Security

TriHire Solutions; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

TriHire Solutions in San Francisco seeks a security leader who rolls up their sleeves to build programs that work across engineering and the business. This hands-on executive owns Security, IT, and Compliance with global reach.

You'll mentor a global team, deepen ISO27001, SOC 2, HIPAA, and GDPR controls, and guide AI/LLMs security in an evolving AI-first company.

Qualifications

• 10+ years in security management, IT operations, compliance, or consulting.
• 3+ years leading security/IT team.
• Hands-on with ISO 27001, SOC 2, HIPAA/GDPR audits.
• Experience in global B2B, SaaS, or cloud businesses.
• Track record managing security incidents end-to-end.
• Strong understanding of AI/LLMs security/challenges.
• Bachelor's in Information Security, CS, MIS, or related field.

Responsibilities

• Own end-to-end Security, IT, and Compliance programs.
• Lead global IT Operations including infrastructure, networks, and systems.
• Coach and mentor a global security team; develop people.
• Partner with engineering and business to embed security in decisions.

Skills

Security leadership

Threat modeling

ISO 27001

SOC 2

HIPAA

GDPR

Global team

AI security

B2B SaaS

Education

Bachelor's degree in Information Security/CS/MIS

Job description

We're hiring a security leader who doesn't manage from a distance. Someone who rolls up their sleeves, builds programs that actually work, and earns trust across engineering by being a genuine partner, not a gatekeeper.

The Role

Reporting to the CFO, you'll lead a high functioning, global team spanning the U.S. and South Korea, with end to end ownership of Security, IT, and Compliance. You're inheriting a world class program, already SOC 2, HIPAA, ISO 27001, and ISO 42001 compliant, and your job is to take it further: deepen the security culture, sharpen the compliance frameworks, and keep pace with an AI first business.

You'll also own global IT Operations, including infrastructure, networks, and systems, as the executive responsible for safeguarding the growing use of AI internally and across the product.

This is a player coach, hands on builder role. Not a talking head role.

You might be a fit if you:

• Have built and run security programs at a B2B SaaS or cloud company, not just inherited them
• Can walk an engineer through a threat model and a CFO through a risk summary, without losing either one
• Know your way around ISO 27001, SOC 2, HIPAA, and GDPR
• Have led or mentored a global security team and take real pride in developing people
• Thrive in ambiguity and build structure where none existed
• Default to fixing, documenting, and improving, not assigning blame
• Treat security as an ongoing conversation with the business, not a monologue at it
• Are already using AI tools to work faster, and thinking about what that means for security programs

What you'll need:

• 10+ years of combined experience across security management, IT operations, compliance, or consulting
• 3+ years leading or managing a security/IT team
• Hands on experience with ISO 27001, SOC 2, and/or HIPAA/GDPR audits
• A background in global B2B, SaaS, or cloud based businesses
• A track record of managing security incidents end to end
• Strong understanding of the security and compliance challenges unique to AI/LLMs
• A bachelor's degree in Information Security, Computer Science, MIS, or a related field

Nice to have:

• CISM, CISA, CISSP, or equivalent certification
• Experience operating across multiple time zones and regulatory environments