Head of InfoSec and IT Ops
ZipSan FranciscoFull TimeEngineering
Remotely
securityauditprivacysoc2iso27001soxsoc1
Job Description
📋 Description
- Own the enterprise security program across governance, compliance, detection/response, and customer
- Lead IT Operations and Engineering to build a global, secure service model.
- Define risk appetite, policies, and measurement with executive reporting.
- Secure AI and internal tools; manage EIAM and data protection programs.
- Oversee third-party risk, resilience, and incident response exercises.
🎯 Requirements
- 12+ years in information security, security engineering, IT engineering/operations, or risk with 5+
- Proven ability to own a broad enterprise security program and partner with Product/Engineering.
- Leadership in incidents, detection/response, vulnerability management, identity, endpoint/SaaS
- Experience with SOC 1/2, ISO 27001, privacy obligations, audit remediation; SOX/ISO 42001 is
- Strong technical judgment to review architecture and control evidence; able to drive risk reduction.
- History scaling IT service delivery with automation, self-service, and clear SLOs.
🎁 Benefits
- N/A