Chief Information Security & Privacy Leader

Candidate; South San Francisco (CA); On-site; USD 250,000 - 350,000; Full time

Job summary

Zipline is seeking a Head of Information Security in South San Francisco to own company‑wide security and privacy strategy. You will lead a lean, technical organization across application, product and corporate security, focusing on the most consequential risks and remediation decisions.

You will build the engineering capabilities, controls, and operating model that scale with Zipline, define and communicate a clear security strategy, and work hands‑on with engineers to implement priority

Qualifications

• Senior leadership experience in a fast‑paced tech org.
• Experience owning security strategy with hands‑on delivery.
• Software engineering foundation and production software experience.
• Depth across app, infra, cloud, identity, data and hardware security.
• Experience with safety‑critical or cyber‑physical systems.
• Experience leading incident response and threat assessment.

Responsibilities

• Set security strategy, risk posture, roadmap and investment priorities.
• Identify high‑consequence risks and drive remediation with cross‑functional teams.
• Help engineering move quickly while maintaining security and privacy.
• Translate technical findings into business tradeoffs for leadership.
• Lead a security engineering team owning production security capabilities.
• Build a high‑performing team with clear expectations and coaching.
• Establish security architecture for identity, access, data protection and cloud.
• Lead threat modeling, testing, vulnerability management, and incident response.

Skills

Leadership at scale

Security strategy

Security engineering

Product security

Incident response

Risk tradeoffs

Job description

Zipline is seeking a Head of Information Security in South San Francisco to own company‑wide security and privacy strategy. You will lead a lean, technical organization across application, product and corporate security, focusing on the most consequential risks and remediation decisions.

You will build the engineering capabilities, controls, and operating model that scale with Zipline, define and communicate a clear security strategy, and work hands‑on with engineers to implement priority