Senior Compliance Program Manager

Zscaler; San Jose (CA); Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Time-off plans for vacation and sick

Parental leave options

Retirement options

In-office perks and more

Job summary

Zscaler accelerates digital transformation and secures cloud adoption for customers worldwide. The Senior Compliance Program Manager will lead end-to-end security audit programs and drive readiness across SOC 2, ISO, and PCI DSS in a hybrid San Jose role.

With 10+ years in security compliance, you will coordinate with internal teams and external auditors, manage evolving regulatory requirements, and uphold risk posture in a fast-growing SaaS environment.

Qualifications

• 10+ years of direct experience in security compliance, audit management or risk assessment within a SaaS or cloud-based enterprise
• Proven ability to manage complex, multi-stakeholder audits with clear communication between technical teams and customer compliance officers
• Deep understanding of global security frameworks (SOC 2, ISO 27001, GDPR) and mapping controls to business requirements
• Leadership experience in customer-facing roles, influencing senior stakeholders and handling high-pressure escalations

Responsibilities

• Own and manage end-to-end Commercial Security compliance audit programs — SOC 2, ISO, PCI DSS — from planning through certification.
• Drive audit readiness, evidence collection and cross-functional coordination with internal teams and external auditors.
• Proactively manage timelines, milestones and regulatory changes to keep programs current and aligned with risk posture.

Skills

Audit management

Security compliance

Stakeholder management

ISO 27001

SOC 2

PCI DSS

Regulatory knowledge

Leadership

Education

CISA

CISSP

CISM

Tools

GRC platforms

Automation tools

Job description

Zscaler accelerates digital transformation to enable our customers to be more agile, efficient, resilient and secure. As an AI‑forward enterprise, we continuously push the envelope, leveraging the world’s largest security data lake to power our cloud‑native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices and applications in any location.

Impact matters more than title here. We build high‑performing teams that deliver results quickly and at high quality, fostering a culture of execution centered on customer obsession, collaboration, ownership and accountability.

We value high‑impact, high‑accountability individuals who embrace urgency, work best in dynamic environments and are dedicated to securing the AI age. If you thrive on solving complex challenges and want to shape the future of cybersecurity, we invite you to join Zscaler.

Role

Senior Compliance Program Manager – Security & Compliance department (Hybrid – onsite in San Jose three days a week). Reports to Senior Manager, Global Commercial Compliance.

What you’ll do (Role Expectations)

• Own and manage end‑to‑end Commercial Security compliance audit programs — SOC 2, ISO, PCI DSS — from planning through certification, ensuring timely delivery and meeting customer expectations.
• Serve as the primary program owner driving audit readiness, evidence collection and cross‑functional coordination with internal teams and external auditors.
• Proactively manage timelines, milestones and stakeholder commitments while continuously monitoring evolving regulatory requirements to keep programs current, effective and aligned with the organization’s risk posture.

Who You Are (Success Profile)

• Thrives in ambiguity and enjoys navigating dynamic environments to build meaningful solutions.
• Owns the mission, demonstrates a bias for action and transitions seamlessly between strategy and execution.
• Collaborates with high trust, actively participates in a challenge culture and exchanges candid feedback respectfully.
• Obses​s over customers, empathizing with internal and external stakeholders and anchoring decisions in solving real‑world problems.
• Executes with urgency, delivering high‑quality, impactful results rapidly to win for both customer and team.

What We’re Looking for (Minimum Qualifications)

• Curiosity and active exploration of AI tools with a history of integrating new technologies to enhance workflows.
• 10+ years of direct experience in security compliance, audit management or risk assessment within a SaaS or cloud‑based enterprise environment.
• Proven ability to manage complex, multi‑stakeholder audits, ensuring clear communication between technical engineering teams and customer compliance officers.
• Deep understanding of global security frameworks (SOC 2, ISO 27001, GDPR) and experience mapping controls to business requirements.
• Leadership experience in a customer‑facing capacity, influencing senior‑level stakeholders and resolving high‑pressure compliance escalations.

What Will Make You Stand Out (Preferred Qualifications)

• Experience leveraging AI‑powered GRC platforms or automation tools to streamline audit evidence collection.
• Advanced professional certifications such as CISA, CISSP or CISM.
• Prior experience designing and maturing audit readiness programs in a hyper‑growth SaaS organization, specifically scaling processes to manage increasing request volumes without compromising quality.

Salary

Base Pay Range: $140,000 – $175,000 USD (full‑time, US locations).

Benefits

• Time‑off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• In‑office perks and more.

Pay Transparency – Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (or accommodations) in our recruiting processes for candidates who are differently abled, have long‑term conditions, mental health conditions, sincerely held religious beliefs, neurodivergent or require pregnancy‑related support.

Zscaler is committed to providing equal employment opportunities to all individuals. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.