Director+

Zapier is a fast-growing, remote-first, AI-forward company building AI-enabled products on top of frontier models. As a critical vendor and subprocessor for thousands of enterprise customers, Zapier routes sensitive data, credentials, and business-critical workflows.

We're looking for a Sr. Director of Security (Head of Security) to lead the Security organization at Zapier. This is our most senior security leadership role, with room for scope and recognition to grow. You will operate strategically and hands-on: setting direction while also going deep enough technically to audit plans, challenge assumptions, and help drive strong security decisions for an AI-native SaaS platform. You will lead a team of Application Security (Product Security), Infrastructure Security, Detection & Response, and GRC engineers.

• Set the vision, strategy, and roadmap for security at an AI-native SaaS company, including how we secure AI features, agentic workflows, and integrations with frontier models.
• Maintain a forward-looking security narrative for leadership: top risks and emerging threats, opportunities, and what requires intentional executive decisions.
• Own and evolve our risk management program: identify and quantify enterprise risk, drive mitigation, report crisply to the executive team, and drive intentional risk acceptance.
• Be Zapier's security voice internally and externally: lead customer security reviews and executive briefings, support GTM in enterprise deals, respond to subprocessor and AI-specific due diligence, and engage with auditors, regulators, and the security community.
• Partner with Product, Engineering, and Enterprise Governance to advise and shape what we build for enterprise customers — trust features, control design, AI/agent boundaries, and enterprise commitments.
• Lead company-wide security change — standards, golden paths, technical gates, vendor and procurement patterns, workforce AI use.
• Lead a high-functioning Detection & Response program — including product security incident response, bug bounty triage, escalation, customer comms, root cause, and systemic fixes.
• Provide strategic leadership for secure-by-default product development, including security and trust features that differentiate Zapier with security-conscious enterprise buyers.
• Partner with Engineering and Product to embed security and AI safety into how we build, ship, and operate — secure SDLC, threat modeling for AI features, evals as controls, MCP/tool permission scoping, and continuous assurance.
• Stay on the bleeding edge of AI, frontier models, and the evolving threat landscape and translate that into how Zapier defends itself, shapes its product, and advises the company.
• Recruit, interview, hire, and onboard top talent — and raise the bar for what an AI-era security org looks like.

• Pragmatic, engineering-oriented SaaS security leader who thinks like an engineer.
• Led security teams for SaaS product companies on modern tech stacks that ship quickly and safely.
• Deep in at least one security discipline (Application/Product Security, Infrastructure Security, Detection & Response, etc.) and broad across the others.
• Fluent in modern cloud and identity threat models, supply chain risk, and secure-by-default infrastructure.
• AI-era security leader who stays on the bleeding edge of what AI enables for defense and for attack.
• Strong in change management: influencing executives, partnering with Build and IT, and shifting how the company works.
• Executive presence internally and externally, comfortable with customers, prospects, CISOs, auditors, regulators, and analysts.
• Deep expertise in detection, response, and incident management, including product security incident response and bug bounty programs.
• Experience managing diverse, high-performing, growth-mindset engineering organizations.
• Ability to develop and deliver on an aligned security vision, strategy, and roadmap.

Compensation: $308.4K – $462.6K (USD) for US-based roles; CA$308.4K – CA$462.6K for Canada-based roles. Offers Equity and Bonus.

Benefits: Equity, Bonus program.

Apply via the provided application link. The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled.