About this role
Job title: Enterprise Security
About the Role
Zapier is seeking to strengthen and scale enterprise security for its AI orchestration platform. You will help maintain and improve security controls, governance, and observability to ensure secure, compliant, and transparent automation across workflows and integrations.
What You'll Do
-
Maintain SOC 2 Type II, SOC 3, GDPR, and CCPA compliance, with annual audits
-
Ensure every execution and integration is logged, with complete audit trails and data flow traceability
-
Manage identity and access controls including SSO (SAML 2.0), SCIM, domain capture, and 2FA
-
Implement governance and access controls to prevent shadow IT and enforce granular permissions
-
Oversee secure deployment options, VPC peering for internal data sources, and secure app connections
-
Monitor security through logs, analytics, alerts, and real-time threat detection
-
Drive continuous security improvements via pen tests, bug bounties, and annual third-party assessments
-
What We're Looking For
-
Experience with enterprise security for SaaS platforms and AI/automation
-
Knowledge of SOC 2 Type II, SOC 3, GDPR, and CCPA compliance
-
Identity and access management expertise including SSO, SCIM, and domain capture
-
Strong data protection practices: encryption at rest/in transit (AES-256), TLS 1.2+, audit logging, and threat detection
-
Experience with AWS or cloud infrastructure and VPC peering
-
Ability to implement governance controls and end-user/app controls across teams
-
Security-minded with ability to provide complete visibility into workflows and data flows
-
Nice to Have
-
Bug bounty programs, annual third-party penetration tests, and independent security verifications
-
Experience with data retention controls and API security
-
Familiarity with BYOM policies, domain restrictions, and central credential management
-
Understanding of domain capture and shared app connections across an organization
-
Compensation & Benefits
-
Not disclosed