---
title: 'Head of InfoSec and IT Ops at Zip'
canonical: 'https://feeny.ai/job/head-of-infosec-and-it-ops-zip-san-francisco-8ttmvqmy3ttz'
type: 'job'
last_seen: '2026-09-19'
---

# Head of InfoSec and IT Ops at Zip

- **Company:** [Zip](https://feeny.ai/companies/zip)
- **Location:** San Francisco, CA
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-08-18
- **Last confirmed live:** 2026-09-19
- **Apply:** https://jobs.ashbyhq.com/zip/44b493eb-225a-4cce-adb0-600400277df7

## Job description

## About Zip

Zip is the AI platform for enterprise procurement — built for humans and agents working together. By orchestrating procurement across teams, tools, and suppliers with the help of AI agents, companies can secure the resources they need to innovate faster than ever before.

The world’s most influential enterprises trust Zip, including T-Mobile, OpenAI, AMD, Mars, Dollar Tree, and more. Together they’ve saved over $8 billion and processed over $500 billion in spend. Zip’s team includes product leaders from Apple, Airbnb, and Meta, as well as former procurement leaders from United Health, Sanofi, MGM Resorts, Discover, and NASA.

Backed by Adams Street, Alkeon, BOND, CRV, DST, Tiger Global, and Y Combinator, Zip has raised $371 million, most recently at a $2.2 billion valuation and has been recognized by Forbes Fintech 50, Fast Company's Most Innovative Companies, Inc. Best in Business, and LinkedIn Top Startups.

## Your Role

You will build and lead the enterprise security and IT operations system for Zip at a pivotal stage of scale. Zip operates a mission-critical enterprise SaaS platform, is rapidly expanding operations globally, and is building the governance and controls required for its next phase.

You will own a practical, engineering-oriented program spanning enterprise security governance, corporate security, detection and incident response, compliance and customer trust, and reliable employee technology. You will partner closely with Product and Engineering leaders responsible for the platform, and with Business Technology and Internal AI leaders building the systems and automations that run Zip.

Your first mandate is to make accountability unambiguous: understand the current program, agree boundaries with existing product/infrastructure security leadership, stabilize IT operations, and turn fragmented risks and services into one measurable operating model. You will lead by doing, while hiring and developing the team.

## What you'll do

- Own the enterprise security program. Establish strategy, risk appetite, policies, control framework, roadmap, metrics, executive reporting, and decision rights.
- Clarify and operate the product/corporate boundary. Partner with Product Security to define who owns application security, cloud/production security, identity engineering, vulnerability management, detection/response, customer trust, and remediation.
- Lead IT Operations and Engineering. Build a high-quality global service model across support, identity, endpoint, SaaS, collaboration, office/network, automation, asset lifecycle, and resilience. Separate frontline support from systems engineering and drive secure self-service.
- Build detection and response. Define priority threats and crown jewels, improve telemetry and detection coverage, establish 24/7 response, run incidents and exercises, and ensure corrective actions prevent recurrence.
- Own GRC, assurance, and customer trust. Maintain and streamline processes for SOC 1, SOC 2, ISO 27001, and IS 42001, prepare for future SOX/public-company controls, manage audits and findings, and enable fast, accurate customer security responses.
- Secure AI and internal tools. Partner with internal teams to define the risk tolerance, framework, and infrastructure to securely deploy AI and business apps built in-house.
- Drive EIAM and data protection. Mature joiner/mover/leaver, privileged access, service identities, access reviews, data classification, DLP, encryption/key management, retention/deletion, and sensitive-data controls.
- Manage third-party and resilience risk. Mature TPRM by risk-tiering vendors, ensuring contractual and operational controls, defining service criticality/RTO/RPO, and maintaining crisis readiness.
- Build the team and culture. Assess roles and capability gaps, hire selectively, develop leaders, create security/IT champions, and make the safe path the easy path.

## What we're looking for

- 12+ years across information security, security engineering, IT engineering/operations, risk, or related disciplines, including 5+ years leading teams in a high-growth B2B SaaS company.
- Experience owning a broad enterprise security program and partnering deeply with Product/Engineering; credible across both corporate and product risk.
- Demonstrated leadership of major incidents, detection/response, vulnerability management, identity, endpoint/SaaS, cloud and secure SDLC programs.
- Practical experience with SOC 1/2, ISO 27001, privacy obligations, customer assurance, and audit remediation. SOX/public-company and ISO 42001 experience are valuable.
- Strong technical judgment: can review architecture, challenge IAM and cloud decisions, understand application/data flows, and distinguish control evidence from real risk reduction.
- History of scaling IT service delivery and systems engineering through automation, self-service, clear SLOs, and excellent employee experience.
- Ability to create clear decision rights in a federated environment and influence executives and engineering leaders without relying on hierarchy.
- Excellent written and incident communication; calm under pressure; high integrity and discretion.
- AI-forward and hands-on: understands LLM/agent risks, MCP/tool access, prompt injection, data leakage, excessive agency, evaluations, and governance.

## Nice to have

- Experience at a procurement, fintech/payments, enterprise workflow, or data-sensitive SaaS company.
- CISSP/CISM, cloud security, incident response, ISO lead implementer/auditor, or similar evidence of depth—certifications are not substitutes for outcomes.
- Experience building an internal audit/SOX readiness program or operating through an IPO.
- Experience integrating or consolidating security and IT organizations after leadership change.

## About Zip

## Company Overview
- **One-liner**: Zip is the AI platform for enterprise procurement, orchestrating the entire purchasing process from intake to pay for large organizations.
- **Entity Type**: Private (Series D, $371M total funding)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2020
- **Founders**: Rujul Zaparde (CEO), Lu Cheng (CTO), Felix Meng (GTM)

## Core Business
- **Primary industry/industries**: Procurement orchestration, spend management, AI-powered enterprise software
- **Target customers**: B2B, primarily large enterprises and mid-market companies (e.g., T-Mobile, OpenAI, AMD, Mars, Dollar Tree, Anthropic)
- **Mission or purpose statement**: "To unblock innovation by helping businesses procure with the fastest process, least risk, and best value."

## Products & Services
- **Intake-to-Procure**: AI-powered platform that guides every purchasing request from intake through approval, automating workflows and policy enforcement.
- **Procure-to-Pay**: Automates purchase orders and invoice processing to close the books faster.
- **Supplier Onboarding**: Streamlines the process of vetting and onboarding new suppliers.
- **Sourcing**: Improves RFx management with AI-driven decision support.
- **Global Payments**: Ensures accurate, compliant payments globally with AI oversight.
- **Vendor Cards**: Controls card spend with real-time visibility and intelligent controls.
- **AI Superagents**: A fleet of AI agents that automate real procurement work, such as the first AI Agent that saved a customer 1,400 hours.
- **App Studio**: Allows customers to build custom integrations and extensions on the Zip platform.

## Market Standing
- **Valuation/Market Cap**: $2.2 billion (most recent valuation, per company about page)
- **Key Metric**: Total Funding of $371M; Annual Revenue estimated at $22.0M (per LinkedIn data)
- **Notable Investors/Partners**: Adams Street, Alkeon, BOND, CRV, DST, Tiger Global, Y Combinator. Partners include major ERP and systems integrators.
- **Growth Signals**: Headcount grew 62.1% YoY to 690 employees. Recognized as a Gartner Magic Quadrant Visionary for Source-to-Pay Suites 2026, Forbes Fintech 50, and Fast Company Most Innovative Companies. Customers have saved over $6.8 billion and processed over $500 billion in spend.

## Competitive Advantages
- **Category Creator**: Pioneered the "intake and orchestration" category in procurement, giving them a first-mover advantage and deep product moat.
- **AI-Native Platform**: Built from the ground up with AI, not retrofitted, allowing for more powerful automation and insights (e.g., AI Superagents).
- **Enterprise Transformation Office**: An in-house advisory team of former CPOs from major enterprises (UnitedHealth, MGM, Discover, NASA) that helps customers redesign their procurement operations, ensuring high-value outcomes and deep customer stickiness.
- **Strong Customer Base**: Trusted by high-profile, innovation-driven companies like OpenAI and Anthropic, which serves as a powerful reference and validation.

## Strategic Focus
- **AI-First Innovation**: Continuing to invest heavily in AI agents to automate more complex procurement tasks and drive efficiency.
- **Global Expansion**: Supporting payments in 140+ countries and operating in 13 countries, with a focus on scaling globally.
- **Platform Depth**: Expanding the platform's capabilities (e.g., App Studio, Vendor Cards) to become the single system of record for all procurement activity.
- **Enterprise Adoption**: Deepening relationships with large enterprises through the Enterprise Transformation Office and ensuring compliance and control at scale.

## Why Work Here
- **Culture & Values**: Emphasizes speed, collaboration ("Win as one"), and a bias for action ("Be the underdog," "Go upstream"). Described as a highly cross-functional and supportive environment where employees are encouraged to "dream big and build even bigger."
- **Remote/Hybrid/Office Policy**: Based in San Francisco, CA. The careers page mentions "catered in-office meals" and a "commuter benefit," suggesting a strong in-office or hybrid culture.
- **Notable Perks**: Start-up equity, health/vision/dental coverage, flexible PTO, generous home office stipend, parental leave, well-being resources, 401k plan, and shiny new Apple equipment.
- **Engineering Culture**: Product leaders from Apple, Airbnb, and Meta. The engineering blog is highlighted, and the team is described as turning concepts into high-quality realities quickly. The company is building a "Developer Platform" team, indicating investment in internal tooling and developer experience.
- **Growth Opportunity**: With 104 active job postings and rapid headcount growth, there is significant opportunity for career advancement and impact in a high-growth, well-funded company.

## Sources
1. [ziphq.com](https://ziphq.com/careers)
2. [ziphq.com](https://ziphq.com/)
3. [zip.com](https://zip.com/about)
4. [linkedin.com](https://www.linkedin.com/company/theziphq)
5. [jobs.ashbyhq.com](https://jobs.ashbyhq.com/zip)

## Other roles at Zip

- [Strategic Account Executive - Central](https://feeny.ai/job/strategic-account-executive-central-zip-united-states-snhgtd8p8yx0) — United States
- [Software Engineer, Forward Deployed (Mid - Senior Level)](https://feeny.ai/job/software-engineer-forward-deployed-mid-senior-level-zip-san-francisco-tjxt8f5b5mtb) — San Francisco, CA
- [Commercial Account Executive](https://feeny.ai/job/commercial-account-executive-zip-germany-6vtngd1barpq) — Germany
- [Business Operations Manager](https://feeny.ai/job/business-operations-manager-zip-san-francisco-z68raz51ta4q) — San Francisco, CA
- [Principal Business Value Consultant](https://feeny.ai/job/principal-business-value-consultant-zip-united-states-gp12a1dfn3x1) — United States
- [Lead Product Marketing Manager, Compete](https://feeny.ai/job/lead-product-marketing-manager-compete-zip-san-francisco-azgb0k2087jr) — San Francisco, CA
- [Enterprise Solution Engineer (Pre-Sales)](https://feeny.ai/job/enterprise-solution-engineer-pre-sales-zip-germany-mvnv4e6t09db) — Germany
- [Commercial Account Manager](https://feeny.ai/job/commercial-account-manager-zip-toronto-8h3sky2v4cg2) — Toronto, Canada
- [Senior Product Designer, Procure to Pay](https://feeny.ai/job/senior-product-designer-procure-to-pay-zip-san-francisco-qg4gwvstzyc0) — San Francisco, CA
- [Senior Product Designer](https://feeny.ai/job/senior-product-designer-zip-toronto-cgjex8f03e4v) — Toronto, Canada