Security Compliance Specialist

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Security Compliance Specialist to join our team. This is a Remote to US role, reporting to the Director, Technology Risk & Compliance in the Exposure Management & Security Operations department. This role supports federal governance, risk, and compliance activities by coordinating certification and authorization efforts, executing assessments with independent assessors, and helping drive continuous monitoring across the federal environment.

The role enables business growth by supporting the addition of new services into the authorization boundary and contributing to the development of scalable, effective compliance processes. What you’ll do (Role Expectations) - Support federal certification and authorization activities by coordinating and executing compliance assessments with independent assessors and internal stakeholders - Drive continuous monitoring efforts by coordinating and executing remediation efforts and ongoing compliance obligations - Contribute to the development, refinement, and execution of scalable compliance processes to support business growth Who You Are (Success Profile) - You thrive in ambiguity, easily building the path as you walk it and viewing a dynamic environment as a prime opportunity to build something meaningful. - You act like an owner with a strong bias for action and a deep care for the outcomes of your work, navigating seamlessly between high-level compliance strategy and hands-on execution. - You champion simplicity by distilling complex regulatory guidelines and technical compliance concepts into clear, actionable, and focus-driven plans. - You think at scale, connecting your daily efforts to the broader organization's mission and building robust compliance processes designed to support global growth. - You lead with integrity, holding yourself and your teammates to high standards of accountability while building trust through consistent, transparent action. What We’re Looking for (Minimum Qualifications) - Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain - 5+ years of experience coordinating federal assessments, collecting and validating control evidence, and driving remediation of risks at a cloud service provider - Deep understanding of NIST 800-53 Rev 5, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and proficiency with fundamental security concepts and continuous monitoring processes - Experience evaluating security incidents against established regulatory and contractual criteria to determine reportability against U. S. Federal incident reporting obligations, documenting assessment rationale, tracking timelines, and partnering cross-functionally to streamline reporting workflows - Must be a U. S. citizen due to the nature of customers.