GRC Program Manager - Federal Compliance Programs

Zscaler • San Jose, CA

76d • $122,500 - $175,000 • Hybrid

About The Position

Zscaler is looking for an experienced Governance Risk and Compliance Program Manager-Federal Compliance Programs to join our Technology Risk & Compliance team. This role offers flexibility to work remotely within the United States, with a preference for candidates based near our San Jose, CA office who can participate in a hybrid schedule (3 days per week onsite). Reporting to the Director Technology Risk and Compliance, you will be responsible for designing, implementing, and maintaining integrated GRC frameworks FedRAMP and DoD authorization, including continuous monitoring and managing project timelines and deliverables. You will collaborate and communicate GRC requirements to a wide range of stakeholders, including engineering, security, business teams, external assessors, federal agencies, and leadership. Additionally, you will monitor relevant laws, regulations, and industry standards, and conduct compliance assessments to ensure continued adherence, influencing business strategy and decision-making through expert compliance insights.

Requirements

• 10+ years of experience in managing FedRAMP, DoD IL5 and DoD IL6 compliance programs from start to finish.
• U.S. citizenship with active U.S. Secret or Top Secret/SCI security clearance.
• Proven expertise in assessing containerized applications, Kubernetes environments and AI/ML technology.
• Experience working with FedRAMP 20x compliance and processes.
• Bachelor's degree in Information Technology (e.g., CIS, CS) or relevant field.
• Experience and Certifications (e.g., CISSP).

Nice To Haves

• Exceptional verbal and written communication skills, tailored for both technical and non-technical audiences.
• Demonstrated strength in prioritizing tasks within a fast-paced, evolving environment.

Responsibilities

• Designing, implementing, and maintaining integrated GRC frameworks FedRAMP and DoD authorization.
• Managing project timelines and deliverables (e.g., NIST 800-53 Rev 5, FIPS 140-3, DoD CC SRG V1R1, OMB Mandates).
• Collaborating and communicating GRC requirements to a wide range of stakeholders.
• Monitoring relevant laws, regulations, and industry standards.
• Conducting compliance assessments to ensure continued adherence.
• Influencing business strategy and decision-making through expert compliance insights.

Benefits

• Various health plans.
• Time off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks, and more!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees