Sr. Director, Security

Ovii's Interpretation of the Role

Zapier seeks a Sr. Director of Security to own the security vision, strategy, and execution for its AI‑native SaaS platform. The role blends executive leadership with hands‑on technical depth across application, infrastructure, detection, and governance domains.

Role Snapshot

• Lead the Security organization (AppSec, InfraSec, D&R, GRC)
• Define security vision, roadmap, and AI‑specific risk strategy
• Drive enterprise‑wide risk management and mitigation
• Partner with executives, product, engineering, legal, and GTM
• Build and run detection & response and incident response programs
• Recruit, develop, and retain high‑performing security teams

Must-Have Requirements

• Application Security
• Infrastructure Security
• Detection & Response
• Governance, Risk & Compliance
• Risk Management
• Incident Response
• lead security teams for SaaS product companies
• deep expertise in at least one security discipline

Nice-to-Have Signals

• AI‑focused security
• Cloud security
• AI‑focused security leadership

Work Setup

• Location: San Francisco, United States
• Work mode: REMOTE
• Remote scope: UNSPECIFIED
• Remote countries: United States, NAMER
• Employment type: Full-Time

Eligibility Gates

• Visa sponsorship: unknown

Not Specified in JD

• Visa sponsorship
• Salary range
• Remote eligibility specifics
• Education requirement
• Certifications
• Relocation
• Notice period
• Travel
• Security clearance
• Coding test
• Portfolio
• GitHub
• Writing sample
• Cover letter

What You'll Likely Work On

• Set and communicate a multi‑year security vision that aligns with Zapier’s AI strategy and enterprise GTM goals
• Own a forward‑looking risk program: identify, quantify, prioritize, and report enterprise risk, including AI‑driven threat vectors
• Lead a high‑performing team across Application Security, Infrastructure Security, Detection & Response, and GRC engineering
• Act as Zapier’s security voice internally and externally—supporting customer security reviews, auditor engagements, and regulator interactions
• Partner with Product, Engineering, and Enterprise Governance to embed security and trust features into the product lifecycle
• Drive company‑wide security change: standards, golden paths, technical gates, and AI‑related procurement policies
• Run detection & response and incident response programs, including bug bounty triage and product security incident handling
• Recruit, interview, and onboard senior security talent to scale the organization

Good Fit If You Have

• Proven track record leading security teams in fast‑moving SaaS environments
• Deep expertise in at least one security discipline (e.g., Application Security, Infrastructure Security, Detection & Response)
• Experience navigating AI‑enabled threat landscapes and shaping AI‑centric security controls
• Strong executive presence and ability to influence cross‑functional stakeholders