Security & IT Operations Leader

Zip; San Francisco (CA); On-site; USD 300,000 - 420,000; Full time

Job summary

Zip is the AI platform for enterprise procurement — built for humans and agents working together. You will build and lead the enterprise security and IT operations system for Zip at a pivotal stage of scale.

Zip operates a mission-critical enterprise SaaS platform, is rapidly expanding operations globally, and is building the governance and controls required for its next phase. You will own a practical, engineering-oriented program spanning enterprise security governance, corporate security,

Qualifications

• Twenty-four-seven enterprise security program experience across governance, risk, compliance, and engineering.
• Ability to coordinate with Product and Engineering on security across applications, cloud, identity, and data flows.
• Proven track record in incident response, threat detection, and security operations for a large SaaS platform.
• Experience with SOC 1/2, ISO 27001, and audit remediation, with SOX/public-company exposure as a plus.

Responsibilities

• Own the enterprise security program, defining strategy, policies, and roadmaps.
• Lead IT operations and engineering with a global service model and secure self-service.
• Build detection and response capabilities, 24/7 incident handling, and post-incident improvements.
• Manage security governance, audits, customer trust, and data protection across the org.
• Secure AI and internal tools, balancing risk and innovation.

Skills

Security leadership

Incident response

Cloud security

SaaS security

Audit & compliance

Job description

Zip is the AI platform for enterprise procurement — built for humans and agents working together. You will build and lead the enterprise security and IT operations system for Zip at a pivotal stage of scale.

Zip operates a mission-critical enterprise SaaS platform, is rapidly expanding operations globally, and is building the governance and controls required for its next phase. You will own a practical, engineering-oriented program spanning enterprise security governance, corporate security,