CISO: Lead Security Strategy for Scale and Safety

Zipline; San Francisco (CA); On-site; USD 260,000 - 380,000; Full time

Job summary

Zipline seeks a Chief Information Security Officer to own the company-wide security and privacy strategy, leading a lean, technically focused security organization across product and corporate security. You will prioritize the most consequential risks, then build scalable engineering capabilities, controls, and operating models that scale with Zipline.

You will define and communicate a clear security strategy, align leaders around it, and remain hands-on in solving the most important problems

Qualifications

• Leadership experience in information security, product security, or security engineering at scale.
• Strong software engineering foundation with production security or controls experience.
• Proven ability to lead serious security incidents and assess threats from sophisticated attackers.
• Judgment balancing security, privacy, legal obligations, safety, velocity, and business needs.

Responsibilities

• Own company-wide security and privacy strategy across product, infrastructure, data, and operations.
• Lead a lean, technical security organization spanning product and corporate security.
• Identify top risks, set remediation priorities, and build scalable engineering controls.
• Advise executives and the board on material security and privacy risks with clear business tradeoffs.
• Lead threat modeling, vulnerability management, and incident response while measuring risk coverage and control effectiveness.

Skills

Leadership

Software security

Incident response

Risk management

Cyber-physical systems

Security strategy

Security governance

Technical depth

Job description

Zipline seeks a Chief Information Security Officer to own the company-wide security and privacy strategy, leading a lean, technically focused security organization across product and corporate security. You will prioritize the most consequential risks, then build scalable engineering capabilities, controls, and operating models that scale with Zipline.

You will define and communicate a clear security strategy, align leaders around it, and remain hands-on in solving the most important problems