Director, Security

Director of Security (ANZ)

• Shape our comprehensive security strategy, driving security, compliance, and governance across our technology landscape.
• Lead and inspire high-performing teams, fostering a culture of continuous improvement and operational excellence.
• Hybrid working arrangement with two team days in our Sydney office.

Write your story with a career at Zip
Join Zip's Technology team who build and maintain our seamless, secure, and sustainable platforms, enabling millions of customers to shop with confidence and our merchant partners to grow their brands.

As the Director of Security, you'll be responsible for establishing and maintaining a comprehensive information security program across Zip ANZ. Your role is critical in helping us achieve a higher level of security maturity, aligning with frameworks and standards such as NIST. Your role will also be critical in providing Zip's board with the key information around our security posture and its ability to innovate safely.

Interesting problems you'll get to solve

• Develop and execute a comprehensive information security strategy that aligns with the company's business objectives and risk appetite.
• Lead and mentor a high-performing security team, focusing on strengthening skills in security controls, vulnerability management, and threat analysis.
• Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, SOC 2, GDPR) as well as NIST controls.
• Oversee vulnerability checks, ensuring they are categorized and addressed based on priority.
• Establish clear rules for addressing critical and high-priority vulnerabilities within a specific timeframes.
• Drive the implementation of security automation tools, including static application security testing, dynamic application security testing, software composition analysis, infrastructure as code scanning, and container security.
• Lead the security approach to AI, focusing on developing secure AI capabilities across the organization.
• Collaborate strategically with internal and external stakeholders, including senior leadership, the board, and external partners.
• Drive change management initiatives to onboard the organization to new security processes and approaches.

What You'll Bring To The Team
To help us level up, and for you to grow with us, you'll bring:

• Leadership: You lead by example and are an exceptional communicator who gains the respect and confidence of your team, peers, through your deep understanding of security.
• Experience: You have extensive experience in security leadership, governance, and strategy.
• Strategic Expertise: Expertise in developing and implementing enterprise-wide security strategies and roadmaps. You have a deep understanding of cybersecurity and compliance frameworks (NIST, ISO You are also knowledgeable about NIST controls and how to mature an organization's security posture.
• Technical Acumen: You have a strong background in securing cloud-native environments (ideally AWS) and modern software architectures. You can guide the implementation of security tools and practices, including security automation.
• Problem-Solving & Incident Management: You are an exceptional strategic thinker and problem-solver. You have a strong track record of successfully managing complex security projects, incident response, and recovery initiatives
• Risk & Change Management: You are adept at identifying and managing risks. You have strong change management skills and can guide the organization in adopting new security practices and standards.
• AI mindset: Embrace AI and new tools to adapt, learn and grow whilst balancing the needs of security
• Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game.

Be a part of a team that reflects the diversity of our customers
We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.

Equally, we're committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.

And finally…get to know us
Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products.

Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers access to point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.

We're proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.