Head of Information Security
Zipline · South San Francisco, California, USA
About this role
**Head of Information Security — Zipline** **About Zipline** Zipline is the world’s largest and most experienced drone delivery service, on a mission to serve all humans equally by ensuring access to food, medicine, and essential goods anytime, anywhere. Zipline designs, builds, and operates autonomous logistics systems that deliver critical supplies quickly and reliably—operating across four continents and completing millions of deliveries to date. **About You and The Role** Zipline operates autonomous delivery systems spanning cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. As **Head of Information Security**, you will own the company-wide **information security and privacy strategy** and lead a lean, technical organization across **application, product, and corporate security**. You’ll start by focusing the company on its most consequential risks and remediation decisions, then build the engineering capabilities, controls, and operating model to scale with Zipline. You will define and communicate a clear security strategy, align leaders around it, and work hands-on with engineers to build and operate security capabilities that address Zipline’s highest-priority risks. --- ## What You’ll Do - Set security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems. - Identify and sequence the company’s highest-consequence risks, driving clear remediation decisions with Engineering, IT, Legal, Safety, Operations, and Physical Security. - Help engineering teams move quickly and securely—making tradeoffs clear and building tools/processes that make secure development easy. - Communicate material security and privacy risk to company leaders and partners, translating technical findings into business tradeoffs and investment decisions. - Lead a software security engineering team owning security capabilities in production, contributing fixes and reusable platforms, and working with Engineering to eliminate systemic vulnerability classes. - Build and develop a high-performing team through hiring, coaching, clear expectations, and direct performance management. - Establish security architecture and practices for identity, access control, secrets, data protection, applications, cloud infrastructure, embedded software, aircraft, and field infrastructure. - Lead threat modeling, testing, vulnerability management, incident response, and security reviews; measure risk coverage, remediation, readiness, control effectiveness, and secure-engineering adoption. --- ## What You’ll Bring - Proven senior leadership experience in a highly technical, fast-paced organization; experience operating at scale and leading security through rapid growth. - Demonstrated experience owning security strategy and hands-on execution across information security, product security, or security engineering. - A software engineering foundation, including experience building production software, security systems, or technical controls. - Technical depth across application, infrastructure, cloud, identity, data, and hardware security. - Experience securing safety-critical or cyber-physical systems (e.g., embedded, robotics, aerospace, automotive, industrial technology). - Experience leading serious security incident response and assessing threats from sophisticated external attackers. - Strong judgment balancing
Listing freshness
CronJobs last confirmed this listing 58m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.