Senior Manager, IT Ops & Corporate Security

Zip•San Francisco, CA

2d•$212,000 - $230,000

About The Position

Zip is seeking a Senior Manager, IT Operations & Information Security to lead the team responsible for employee technology and corporate technology security. The role owns daily IT operations and the employee technology experience from onboarding through offboarding across offices and remote locations. It is a player-coach position, with approximately one-third of the time spent hands-on resolving urgent issues, configuring systems, and leading incidents, and the remainder focused on priorities, coaching, and team development. The security remit covers employee identities, endpoints, SaaS applications, and office networks; product security is handled by other teams. The manager will lead a distributed team across San Francisco, New York, and Toronto, with additional global offices possible in the future. Occasional travel to the New York and Toronto offices is expected. The role will also lead IT's AI work in partnership with Enterprise Technology and Internal AI: rolling out and securing employee AI tools, building agents to handle routine IT work, and defining standards for AI access to company systems.

Requirements

At least 8 years of experience in IT operations, corporate IT, or infrastructure, including at least 3 years managing IT teams; experience managing remote or multi-location reports is preferred.
A track record of owning daily IT operations at a growing technology company and building or materially improving an IT support function with measurable results.
Strong hands-on experience with Google Workspace and Okta or a comparable identity provider, including SSO, MFA, and automated user provisioning.
Experience with Iru or a comparable device management platform, including macOS and Windows administration, patching, encryption, and endpoint security.
Experience managing an IT service management platform, including request workflows, service levels, knowledge management, and reporting.
Working knowledge of office networking such as Meraki or comparable systems, Zoom Rooms, and conference-room AV.
Experience securing corporate environments across identity, endpoints, and SaaS, including vulnerability management and access reviews.
Experience directing security engineers and leading incident response from triage through recovery; experience with a managed detection and response provider and supporting SOC 2 or ISO 27001 audits is preferred.
A track record of building with AI tools, APIs, and scripts in ways that changed IT team operations, with measured results.
Strong people management skills, including hiring, coaching, direct feedback, and performance management, as well as clear communication and sound judgment under pressure.

Nice To Haves

Experience supporting office expansions or international offices.
Experience securing AI tools, service accounts, and agent access to internal systems.
Relevant certifications in identity, networking, IT service management, or information security.

Responsibilities

Lead daily IT operations, including support coverage, ticket queues, escalations across time zones, ownership of critical services, and an after-hours on-call rotation.
Own the employee technology lifecycle, partnering with People and hiring managers on onboarding, role changes, and offboarding, including device readiness, access, deprovisioning, session revocation, and equipment recovery.
Administer and improve Google Workspace, Okta, Iru, Zoom, and the IT service management platform; maintain standards, documentation, and runbooks.
Manage endpoint, identity, and access practices, including device lifecycle, patching, compliance, SSO, MFA, SCIM provisioning, and regular least-privilege access reviews.
Own office networking, Wi-Fi, Zoom Rooms, and conference-room AV in partnership with Workplace and integrators, including office moves and buildouts.
Lead corporate security operations and incident response, directing the senior security engineer and managed monitoring provider, triaging alerts, driving vulnerabilities and misconfigurations to remediation, and serving as incident commander for corporate security incidents.
Support SOC 2 and ISO 27001 audits, security awareness, and customer security reviews of the corporate environment; partner with Engineering where corporate and product security concerns intersect.
Design and ship AI agents and automations for routine IT requests, with approvals and logging; measure resolution and failure rates and teach the team to build automations.
Set access, approval, and logging standards for AI tools, service accounts, and agents in partnership with Internal AI and Enterprise Technology.
Hire, coach, and manage team performance; own budgets, vendors, and renewals.
Track response and resolution times, onboarding readiness, deprovisioning timeliness, device compliance, and employee satisfaction, and use the metrics to set quarterly priorities.