Skip to content

Zscaler

Remote - USA

Security Compliance Specialist

Posted 2 days ago

Level
Mid level
Experience
5+ years
Work style
Remote
Area
Governance, risk & compliance

At a glance

The role in plain English

This Security Compliance Specialist role at Zscaler involves supporting federal governance, risk, and compliance activities for cloud services. The position suits candidates with experience in federal compliance frameworks and cloud environments, especially those who can coordinate assessments and continuous monitoring. Day-to-day tasks include working with independent assessors, internal stakeholders, and cross-functional teams to ensure compliance and support business growth. The role is remote within the US and reports to the Director of Technology Risk & Compliance.

What you'll do

  • Coordinate and execute federal compliance assessments with assessors and stakeholders
  • Drive continuous monitoring and remediation of compliance obligations
  • Develop and refine scalable compliance processes
  • Evaluate security incidents against federal reporting criteria

What they're looking for

Essential

  • 5+ years coordinating federal assessments at a cloud service provider
  • Deep understanding of NIST 800-53 Rev 5, FedRAMP, DoD SRG, CNSSI 1253
  • Experience with continuous monitoring and incident reportability
  • Bachelor’s degree in a relevant field or equivalent experience
  • Must be a U.S. citizen

Nice to have

  • Experience leveraging AI technologies for operational efficiency
  • Familiarity with cloud, SaaS, PaaS, and IaaS environments
  • Ability to communicate control effectiveness to varied audiences
  • Active US Government Secret or Top-Secret clearance

Core skills

  • NIST 800-53
  • FedRAMP
  • Continuous monitoring
  • Incident response
  • Cloud compliance
  • Risk assessment

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

3/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

3/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your experience coordinating federal compliance assessments for cloud services.
  2. 02How do you approach continuous monitoring and remediation in a federal environment?
  3. 03Explain how you would determine if a security incident is reportable under U.S. federal obligations.
  4. 04What steps would you take to incorporate a new cloud service into an existing authorized boundary?

About Zscaler

Zscaler provides cloud-based security services and operates a global Zero Trust Exchange platform for secure user, device, and application connections.

Full job descriptionAs published by Zscaler

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform.

We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler.

Role We are looking for a Security Compliance Specialist to join our team. This is a Remote to US role, reporting to the Director, Technology Risk & Compliance in the Exposure Management & Security Operations department. This role supports federal governance, risk, and compliance activities by coordinating certification and authorization efforts, executing assessments with independent assessors, and helping drive continuous monitoring across the federal environment. The role enables business growth by supporting the addition of new services into the authorization boundary and contributing to the development of scalable, effective compliance processes.

What you’ll do (Role Expectations)

  • Support federal certification and authorization activities by coordinating and executing compliance assessments with independent assessors and internal stakeholders
  • Drive continuous monitoring efforts by coordinating and executing remediation efforts and ongoing compliance obligations
  • Contribute to the development, refinement, and execution of scalable compliance processes to support business growth

Who You Are (Success Profile)

  • You thrive in ambiguity, easily building the path as you walk it and viewing a dynamic environment as a prime opportunity to build something meaningful.
  • You act like an owner with a strong bias for action and a deep care for the outcomes of your work, navigating seamlessly between high-level compliance strategy and hands-on execution.
  • You champion simplicity by distilling complex regulatory guidelines and technical compliance concepts into clear, actionable, and focus-driven plans.
  • You think at scale, connecting your daily efforts to the broader organization's mission and building robust compliance processes designed to support global growth.
  • You lead with integrity, holding yourself and your teammates to high standards of accountability while building trust through consistent, transparent action.

What We’re Looking for (Minimum Qualifications)

  • Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
  • 5+ years of experience coordinating federal assessments, collecting and validating control evidence, and driving remediation of risks at a cloud service provider
  • Deep understanding of NIST 800-53 Rev 5, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and proficiency with fundamental security concepts and continuous monitoring processes
  • Experience evaluating security incidents against established regulatory and contractual criteria to determine reportability against U.S. Federal incident reporting obligations, documenting assessment rationale, tracking timelines, and partnering cross-functionally to streamline reporting workflows
  • Must be a U.S. citizen due to the nature of customers.
  • Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field (or equivalent practical experience) with strong organizational, analytical, and communication skills to manage multiple priorities and drive follow-through

What Will Make You Stand Out (Preferred Qualifications)

  • Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
  • Familiarity with cloud, SaaS, PaaS, and IaaS environments, including how new products or services are assessed and incorporated into an authorized boundary
  • Ability to understand the intent of control objectives across various technologies and exceptionally communicate effectiveness to both technical and non-technical audiences
  • Active US Government Secret or Top-Secret security clearance is highly preferred

#LI-AJ1 #LI-Remote

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.

The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.

Base Pay Range

$118,000 — $148,000 USD

At Zscaler, we are committed to building a team that reflects the communities we serve and the customers we work with. We foster an inclusive environment that values all backgrounds and perspectives, emphasizing collaboration and belonging. Join us in our mission to make doing business seamless and secure.

Our Benefits program is one of the most important ways we support our employees. Zscaler proudly offers comprehensive and inclusive benefits to meet the diverse needs of our employees and their families throughout their life stages, including:

  • Various health plans
  • Time off plans for vacation and sick time
  • Parental leave options
  • Retirement options
  • Education reimbursement
  • In-office perks, and more!

Learn more about Zscaler's hybrid working model and benefits here .

By applying for this role, you adhere to applicable laws, regulations, and Zscaler policies, including those related to security and privacy standards and guidelines.

Zscaler is committed to providing equal employment opportunities to all individuals. We strive to create a workplace where employees are treated with respect and have the chance to succeed. All qualified applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy or related medical conditions), age, national origin, sexual orientation, gender identity or expression, genetic information, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. See more information by clicking on the Know Your Rights: Workplace Discrimination is Illegal link.

Pay Transparency

Zscaler complies with all applicable federal, state, and local pay transparency rules.

Zscaler is committed to providing reasonable support (called accommodations or adjustments) in our recruiting processes for candidates who are differently abled, have long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support.

  • Santa Clara, California, USA · Hybrid

    Lead the architecture and development of Layer 7 security and proxy features for Zscaler's Zero Trust Exchange, focusing on advanced protocols and SSL inspection. Requires on-site work in Santa Clara, CA at least three days a week.

    SeniorProxy architectureC programmingTLS/SSL
  • Santa Clara, California, USA · Hybrid

    Provide technical leadership for Layer 7 security and proxy engineering in Zscaler's Zero Trust Exchange, emphasizing advanced protocol handling and SSL inspection. Hybrid work in Santa Clara, CA is required.

    SeniorCProxiesTLS/SSL
  • Zscaler

    Posted 23 Oct

    Staff Threat Researcher

    Remote - UK

    Design and implement backend systems for the threat intelligence team, focusing on scalable data pipelines to enhance threat detection. Requires experience in backend development and working with large-scale data processing.

    SeniorPythonPostgreSQLRedis
  • Poland · Remote

    Respond to customer security requests, manage security documentation, and support vulnerability-related work for Elastic's InfoSec team. The role involves cross-team collaboration and requires experience with risk management and compliance.

    Mid levelSecurity questionnairesGRCAutomation

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Includes our free beginner roadmap · No spam · Unsubscribe anytime