# Head of InfoSec and IT Ops at Zip

- Company: Zip
- What the company does: Orchestrate the entire intake-to-pay process with the leading AI procurement platform. Zip uses purpose-built AI agents to automate global sourcing, compliance, and spend. Backed by Y Combinator and CRV.
- Company website: https://ziphq.com/
- Type: Startups
- Level: Principal and up
- Location: San Francisco
- Work setup: Remote
- Posted: 2026-08-18
- Apply by: 2026-10-08
- Apply: https://jobs.ashbyhq.com/zip/44b493eb-225a-4cce-adb0-600400277df7
- Page: https://www.1752.vc/careers/jobs/zip-head-of-infosec-and-it-ops/

## About the role

Own the enterprise security program. Establish strategy, risk appetite, policies, control framework, roadmap, metrics, executive reporting, and decision rights. Clarify and operate the product/corporate boundary. Partner with Product Security to define who owns application security, cloud/production security, identity engineering, vulnerability management, detection/response, customer trust, and remediation.

## What they're looking for

- 12+ years across information security, security engineering, IT engineering/operations, risk, or related disciplines, including 5+ years leading teams in a high-growth B2B SaaS company
- Experience owning a broad enterprise security program and partnering deeply with Product/Engineering, credible across both corporate and product risk
- Demonstrated leadership of major incidents, detection/response, vulnerability management, identity, endpoint/SaaS, cloud and secure SDLC programs
- Practical experience with SOC 1/2, ISO 27001, privacy obligations, customer assurance, and audit remediation. SOX/public-company and ISO 42001 experience are valuable
- Strong technical judgment: can review architecture, challenge IAM and cloud decisions, understand application/data flows, and distinguish control evidence from real risk reduction
- History of scaling IT service delivery and systems engineering through automation, self-service, clear SLOs, and excellent employee experience

Tags: Engineering