Staff Technical Program Manager - Government Authorizations

Zscaler • San Jose, CA

22h • Hybrid

About The Position

Zscaler is seeking an experienced Staff Technical Program Manager - Government Authorizations to own the end-to-end execution of authorizations and continuous monitoring activities across the FedRAMP and DoD programs. This role operates with an ownership mindset, accomplishing tasks with a dedicated focus against clear priorities, and driving cross-functional execution from onboarding through authorization and ongoing sustainment.

Requirements

• 5+ years of experience leading US Government compliance audits and the remediation of risks tracked in the POA&M
• Deep understanding of NIST 800-53 Rev 5, DoD Cloud Computing SRG, CNSSI 1253 and how the control requirements translate to practical implementations of GRC controls in distributed environments
• Proven experience coordinating assessment evidence collection activities across technical and non-technical stakeholders
• Proficiency with fundamental security concepts and continuous monitoring processes
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field (or equivalent practical experience)
• Must be a U.S citizen

Nice To Haves

• U.S Secret or Top Secret security clearance is a plus
• Direct experience owning FedRAMP/DoD ATO packages, ConMon submissions, and interactions with authorizing officials/3PAO assessors
• Possesses the ability to understand the intent of control objectives, how it applies to various technologies and evidence that demonstrates the effectiveness of the control objectives.
• Exceptional verbal and written communication skills tailored for both technical and non-technical audiences

Responsibilities

• Own the authorization activities (SSPs, POA&Ms, SARs) across all impact levels
• Facilitate audit interviews, evidence collection and remediation activities
• Evaluate and adjust authorization strategy based on evolving certification programs (FedRAMP 20x), requirements and technology
• Support continuous monitoring activities (incident response/reporting, access reviews, vulnerability scan analysis, change reviews) and drive continuous improvements based on lessons learned in partnership with Compliance Engineering and Compliance Architecture
• Advise relevant stakeholders on the current and future risks to authorization activities
• Serve as the primary interface with government stakeholders and 3PAO to ensure clear communication for driving authorization activities

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

What This Job Offers

• Job Type: Full-time
• Career Level: Senior