Senior Manager, IT Ops & Corporate Security

Zip•San Francisco, CA

About The Position

Zip is seeking a Senior Manager, IT Operations & Information Security to lead the team responsible for employee technology, daily IT operations, and corporate technology security. The role owns the employee technology experience from onboarding through offboarding across offices and remote locations, with corporate security responsibility for employee identities, endpoints, SaaS applications, and office networks. Product security is owned by other teams. This is a player-coach role, with approximately one-third of the time spent hands-on resolving urgent issues, configuring systems, and leading incidents. The remainder is focused on setting priorities, coaching, and building a team able to operate effectively. The role leads a team across San Francisco, New York, and Toronto, with additional global offices possible in the future. Occasional travel to the New York and Toronto offices is expected. The role will lead IT’s adoption of AI in partnership with Enterprise Technology and Internal AI. This includes rolling out and securing employee AI tools, building agents to handle routine IT work, and setting standards for AI access to company systems so IT can scale as Zip grows.

Requirements

8+ years of experience in IT operations, corporate IT, or infrastructure, including 3+ years managing IT teams; experience with remote or multi-location reports is ideal.
Track record of owning daily IT operations at a growing technology company and building or materially improving an IT support function with measurable results.
Strong hands-on experience with Google Workspace and Okta or a comparable identity provider, including SSO, MFA, and automated user provisioning.
Experience with Iru or a comparable device management platform, including macOS and Windows administration, patching, encryption, and endpoint security.
Experience managing an IT service management platform, including request workflows, service levels, knowledge management, and reporting.
Working knowledge of office networking such as Meraki or a comparable platform, Zoom Rooms, and conference-room AV.
Experience securing a corporate environment across identity, endpoints, and SaaS, including vulnerability management and access reviews.
Experience directing security engineers and leading incident response from triage through recovery; experience with a managed detection and response provider is ideal.
Experience supporting audits such as SOC 2 or ISO 27001.
Track record of building with AI tools, such as LLM assistants, agents, or workflow automation, as well as APIs and scripts, with measured results that changed how an IT team works.
Strong people management skills, including hiring, coaching, direct feedback, and performance management.
Clear communication and sound judgment under pressure.

Nice To Haves

Experience supporting office expansions or international offices.
Experience securing AI tools, service accounts, and agent access to internal systems.
Relevant certifications in identity, networking, IT service management, or information security.

Responsibilities

Lead daily IT operations, including support coverage, ticket queues, escalations across time zones, service ownership, and an on-call rotation for after-hours incidents.
Own the employee technology lifecycle in partnership with People and hiring managers, including onboarding, role changes, offboarding, device readiness, access, deprovisioning, session revocation, and equipment recovery.
Administer and improve Google Workspace, Okta, Iru, Zoom, and the IT service management platform; maintain standards, documentation, and runbooks.
Oversee device lifecycle, patching, compliance, SSO, MFA, SCIM provisioning, and regular access reviews to enforce least privilege.
Own office networking, Wi-Fi, Zoom Rooms, and conference-room AV in partnership with Workplace and integrators, including office moves and buildouts.
Lead corporate security operations and incident response for employee identities, endpoints, SaaS applications, and office networks.
Direct the senior security engineer and managed monitoring provider; triage alerts and drive vulnerabilities and misconfigurations through remediation.
Act as incident commander for corporate security incidents, and support SOC 2 and ISO 27001 audits, security awareness, and customer security reviews of the corporate environment.
Partner with Engineering where corporate and product security concerns intersect.
Design and ship AI agents and automations for routine IT requests, with appropriate approvals and logging; measure their resolution rates and failure points and teach the team to build its own automations.
Work with Internal AI and Enterprise Technology to set access, approval, and logging standards for AI tools, service accounts, and agents.
Hire, coach, and manage team performance; own budgets, vendors, and renewals.
Track response and resolution times, onboarding readiness, deprovisioning timeliness, device compliance, and employee satisfaction, and use the results to set quarterly priorities.