Head of Information Security

Zipline is the world’s largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods anytime, anywhere. We design, build, and operate the world’s largest autonomous logistics system, delivering critical supplies quickly and reliably. Today, Zipline operates on four continents, makes a delivery somewhere in the world every 30 seconds, and has completed millions of deliveries to date, including blood, vaccines, medical supplies, food, and retail products.

Our customers include the world’s largest and most prominent healthcare systems, governments, retailers, restaurants and global businesses who rely on us to save lives, reduce emissions, increase economic opportunity, and provide delivery from point A to point B as fast as possible. The drone is only 15% of what we’ve built to enable seamless, reliable, global operations.

Our system strengthens supply chains, reduces congestion, and gives people time back. With more than 140 million commercial autonomous miles safely flown, Zipline is redefining access to healthcare, consumer products, and food across the globe.

We operate at a global scale and are looking for practical problem solvers who thrive on real-world challenges and rapid growth. Our team is motivated by building systems that have a direct, meaningful impact on people’s lives and by scaling the future of logistics. We are seeking people who sculpt from first principles, enjoy facing adversity, and can do the impossible at record breaking speeds.

Zipline operates autonomous delivery systems spanning cloud services, customer and operational data, embedded software, aircraft, and field infrastructure. Security must protect those systems, customers, partners, and the people who rely on them while enabling engineering teams to deliver safely and quickly.

As Head of Information Security, you will own company-wide information security and privacy strategy and lead a lean, technical organization across application, product and corporate security. You will first focus the company on its most consequential risks and remediation decisions, then build the engineering capabilities, controls, and operating model that scale with Zipline. You will define and communicate a clear company-wide security strategy, align leaders around it, and work hands-on with engineers to build and operate the security capabilities that address our highest-priority risks.

As Zipline continues to grow, you’ll have the opportunity to grow with it, taking on broader scope and organizational leadership as the company’s needs evolve.

• Set security and privacy strategy, risk posture, roadmap, operating model, and investment priorities across product, infrastructure, data, corporate technology, and physical systems.

• Identify and sequence the company’s highest-consequence risks, driving clear remediation decisions with Engineering, IT, Legal, Safety, Operations, and Physical Security.

• Be a pragmatic problem solver who helps engineering teams move quickly and securely. Make tradeoffs clear, find practical ways to reduce risk, and build tools and processes that make secure development easy.

• Communicate material security and privacy risk clearly to company leaders and partners, translating technical findings into business tradeoffs and investment decisions.

• Lead a software security engineering team that owns security capabilities in production, contributes fixes and reusable platforms, and works alongside Engineering to eliminate systemic vulnerability classes.

• Build and develop a high-performing team through hiring, coaching, clear expectations, and direct performance management.

• Establish