Director, Security

Overview
Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products.
Operating in two core markets — Australia and New Zealand (ANZ) and the US — Zip offers access to point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.
We are a values-led business, guided by Customer First, Own It, Stronger Together and Change the Game.
As the Director of Security for ANZ, you will be responsible for establishing and maintaining a comprehensive information security program across Zip ANZ.
Your role is critical in helping us achieve a higher level of security maturity, aligning with frameworks and standards such as NIST, and providing Zip's board with the key information about our security posture and its ability to enable safe innovation.
Responsibilities
Develop and execute a comprehensive information security strategy that aligns with the company's business objectives and risk appetite.
Lead and mentor a high-performing security team, focusing on strengthening skills in security controls, vulnerability management, and threat analysis.
Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, SOC 2, GDPR) as well as NIST controls.
Oversee vulnerability checks, ensure they are categorized and addressed based on priority.
Establish clear rules for addressing critical and high-priority vulnerabilities within defined timeframes.
Drive the implementation of security automation tools, including SAST, DAST, software composition analysis, infrastructure as code scanning, and container security.
Lead the security approach to AI, focusing on developing secure AI capabilities across the organization.
Collaborate strategically with internal and external stakeholders, including senior leadership, the board, and external partners.
Drive change management initiatives to onboard the organization to new security processes and approaches.
What You'll Bring To The Team
Leadership: You lead by example and are an exceptional communicator who earns the respect and confidence of your team and peers through a deep understanding of security.
Experience: Extensive experience in security leadership, governance, and strategy.
Strategic Expertise: Expertise in developing and implementing enterprise-wide security strategies and roadmaps; strong knowledge of cybersecurity and compliance frameworks (NIST, ISO 27001) and how to mature an organization's security posture.
Technical Acumen: Strong background in securing cloud-native environments (ideally AWS) and modern software architectures; ability to guide the implementation of security tools and practices, including security automation.
Problem-Solving & Incident Management: Proven track record of managing complex security projects, incident response, and recovery initiatives.
Risk & Change Management: Ability to identify and manage risks and guide organization in adopting new security practices and standards.
AI mindset: Embrace AI and new tools to adapt, learn and grow while balancing security needs.
Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game.
Be a part of a team that reflects the diversity of our customers
We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.
We're committed to ensuring our recruitment processes are accessible and inclusive.
Please let us know if there are any adjustments that need to be made to ensure you have a fair and equitable experience.
And finally...get to know us
Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products.
Operating in Australia, New Zealand (ANZ), and the US, Zip provides access to point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.
We're a values-led business guided by Customer First, Own It, Stronger Together and Change the Game.
Details
Seniority level: Director
Employment type: Full-time
Job function: Other, Information Technology, and Management
Industries: Financial Services and IT Services and IT Consulting
#J-18808-Ljbffr