Hybrid Senior Security Compliance Lead

Zscaler; San Jose (CA); Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Time-off plans for vacation and sick

Parental leave options

Retirement options

In-office perks and more

Job summary

Zscaler accelerates digital transformation and secures cloud adoption for customers worldwide. The Senior Compliance Program Manager will lead end-to-end security audit programs and drive readiness across SOC 2, ISO, and PCI DSS in a hybrid San Jose role.

With 10+ years in security compliance, you will coordinate with internal teams and external auditors, manage evolving regulatory requirements, and uphold risk posture in a fast-growing SaaS environment.

Qualifications

• 10+ years of direct experience in security compliance, audit management or risk assessment within a SaaS or cloud-based enterprise
• Proven ability to manage complex, multi-stakeholder audits with clear communication between technical teams and customer compliance officers
• Deep understanding of global security frameworks (SOC 2, ISO 27001, GDPR) and mapping controls to business requirements
• Leadership experience in customer-facing roles, influencing senior stakeholders and handling high-pressure escalations

Responsibilities

• Own and manage end-to-end Commercial Security compliance audit programs — SOC 2, ISO, PCI DSS — from planning through certification.
• Drive audit readiness, evidence collection and cross-functional coordination with internal teams and external auditors.
• Proactively manage timelines, milestones and regulatory changes to keep programs current and aligned with risk posture.

Skills

Audit management

Security compliance

Stakeholder management

ISO 27001

SOC 2

PCI DSS

Regulatory knowledge

Leadership

Education

CISA

CISSP

CISM

Tools

GRC platforms

Automation tools

Job description

Zscaler accelerates digital transformation and secures cloud adoption for customers worldwide. The Senior Compliance Program Manager will lead end-to-end security audit programs and drive readiness across SOC 2, ISO, and PCI DSS in a hybrid San Jose role.

With 10+ years in security compliance, you will coordinate with internal teams and external auditors, manage evolving regulatory requirements, and uphold risk posture in a fast-growing SaaS environment.