Head of Infrastructure & Security (GCP)

TL;DR

Head of Infrastructure & Security (GCP): Owning and maturing cloud infrastructure, security programs, and corporate IT for a B2B SaaS platform and professional services firm with an accent on scalability, compliance, and risk management. Focus on driving SOC 2 Type II certification, optimizing multi-tenant MongoDB environments on GCP, and leading high-performing technical teams.

Location: Must be located in Montreal (Hybrid)

Company

hirify.global operates two connected businesses: Rebus, a B2B SaaS platform for warehouse operations, and a WMS implementation and professional services firm.

What you will do

• Own end-to-end cloud infrastructure on GCP, focusing on reliability, cost, and scalability for a multi-tenant SaaS platform.
• Manage a large-scale data layer on MongoDB Atlas, overseeing architecture, performance, and scaling decisions.
• Lead the overall security program, including incident response, policy development, and achieving SOC 2 Type II and ISO 27001 compliance.
• Handle customer-facing security audits, questionnaires, and trust conversations with enterprise buyers.
• Provide strategic direction and oversight for the corporate IT function and hosted WMS environments.
• Mentor and lead senior SREs and an established internal IT team.

Requirements

• Significant experience owning production cloud infrastructure at scale, ideally on GCP, in a SaaS context.
• Demonstrated ownership of a security program, including direct experience driving SOC 2 Type II to completion.
• Strong expertise in operating large, multi-tenant MongoDB database environments.
• Ability to lead technical security discussions with demanding enterprise customers.
• Experience leading and developing technical staff, including senior individual contributors.
• Must be based in Montreal; the company cannot assist with relocation or work permit applications.

Nice to have

• Experience in dual-business or services-plus-product environments.
• Familiarity with the privacy obligations of a data processor (GDPR, CCPA).
• Pragmatic build-vs-buy mindset regarding security tooling and outsourced services.

Culture & Benefits

• Supportive work environment with a strong emphasis on work-life balance.
• Comprehensive health and dental benefits eligible from the first day.
• 4 weeks of paid vacation, 6 paid sick days, and 2 paid personal days per year.
• Group RRSP/401k matching.
• Work from home flexibility with occasional in-person team meetings.