Senior Compliance Program Manager

Zscaler•San Jose, CA

3d•Hybrid

About The Position

We are looking for a Senior Compliance Program Manager to join our team. This is a hybrid role (onsite in San Jose three days a week), reporting to the Senior Manager, Global Commercial Compliance in the Security & Compliance department. In this critical position, you will serve as the dedicated owner for managing the security compliance audits.

Requirements

Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
10+ years of direct experience in security compliance, audit management, or risk assessment within a SaaS or cloud-based enterprise environment
Demonstrated ability to manage complex, multi-stakeholder audits, ensuring clear communication between technical engineering teams and customer compliance officers
Deep understanding of global security frameworks (e.g., SOC2, ISO 27001, GDPR) and experience mapping these controls to business requirements
Proven leadership experience in a customer-facing capacity, capable of influencing senior-level stakeholders and resolving high-pressure compliance escalations

Nice To Haves

Experience leveraging AI-powered GRC platforms or automation tools to streamline audit evidence collection, reduce manual effort, and improve response accuracy
Advanced professional certifications such as CISA, CISSP, or CISM, demonstrating deep expertise in security governance
Prior experience designing and maturing audit readiness programs in a hyper-growth SaaS organization, specifically scaling processes to manage increasing request volumes without compromising quality

Responsibilities

Own and manage end-to-end Commercial Security compliance audit programs — including SOC 2, ISO, and PCI DSS — from planning through certification, ensuring timely delivery that meets customer expectations
Serve as the primary program owner driving audit readiness, evidence collection, and cross-functional coordination with internal teams and external auditors
Proactively manage timelines, milestones, and stakeholder commitments while continuously monitoring evolving regulatory requirements to keep programs current, effective, and aligned with the organization's risk posture