Chief InfoSec & IT Operations Leader

ZipHQ, Inc.; San Francisco (CA); Hybrid; USD 250,000 - 350,000; Full time

Job summary

ZipHQ, Inc. is seeking an experienced security and IT operations leader to scale enterprise security for a rapidly growing, global SaaS platform.

You will establish governance, risk, and controls across product and infrastructure teams, and partner with AI and internal tooling groups to secure deployments. You will drive 24/7 detection/response, audits (SOC 1/2, ISO 27001), and future SOX readiness while building a high-performing security and IT organization.

Qualifications

• 12+ years in information security, security engineering, or IT operations in a high-growth B2B SaaS environment.
• Proven leadership of enterprise security programs and collaboration with product/engineering teams.
• Experience leading incidents, detection/response, vulnerability management, identity, and cloud security programs.
• Familiarity with audit readiness, privacy obligations, and customer assurance.
• Hands-on AI security awareness including LLM risks and governance.

Responsibilities

• Own the enterprise security program: strategy, policies, control framework, roadmap, metrics, executive reporting, and decision rights.
• Define product/corporate boundary with Product Security and own application security, cloud security, identity, and threat remediation.
• Lead IT Operations and Engineering: global service model, automation, self-service, and resilience.
• Build detection and response: threat prioritization, telemetry, 24/7 incident response, and post-incident follow-up.
• Own GRC, assurance, and customer trust: SOC 1/2, ISO 27001, privacy, audits, and customer security responses.
• Secure AI and internal tools: risk tolerance, framework, and infrastructure for AI deployments.
• Drive EIAM and data protection: joiner/mover/leaver, privileged access, data classification, encryption, retention.
• Manage third-party and resilience risk: TPRM, vendor risk tiers, RTO/RPO, crisis readiness.
• Build the team and culture: hire and develop security leaders, establish security champions, make safe paths easy.

Skills

Enterprise security leadership

Incident response management

Risk governance

AI security governance

Stakeholder collaboration

Tools

SOC 1/2

ISO 27001

SOX readiness

Job description

ZipHQ, Inc. is seeking an experienced security and IT operations leader to scale enterprise security for a rapidly growing, global SaaS platform.

You will establish governance, risk, and controls across product and infrastructure teams, and partner with AI and internal tooling groups to secure deployments. You will drive 24/7 detection/response, audits (SOC 1/2, ISO 27001), and future SOX readiness while building a high-performing security and IT organization.