Senior Manager, Global Commercial Compliance

About the role

This role focuses on developing and executing Zscaler's global commercial compliance strategy, covering international and public sector assurance programs. The Senior Manager will be responsible for creating scalable compliance initiatives that integrate various regulatory frameworks. This includes establishing unified requirements across standards like ISO, SOC, and PCI to ensure consistent adherence.

A key aspect of this position involves leading audit activities, from internal reviews to managing external assessments from start to finish. The Senior Manager will also be tasked with defining and tracking compliance performance metrics, creating dashboards to visualize compliance health, and providing regular, executive-level reports on the company's compliance status and emerging risk patterns.

Success in this role means maintaining a robust and adaptable compliance posture that supports Zscaler's global operations and digital transformation goals. The individual will contribute to the company's secure and efficient growth by ensuring adherence to critical security standards and effectively communicating compliance status to leadership.

The salary for this position ranges from $164,500 to $235,000 annually.

Skills that matter here

• ISO 27001: This standard is a core framework for building and maintaining information security management systems within the compliance programs.
• SOC 2: The role requires integrating SOC 2 requirements into scalable compliance programs and managing related audit processes.
• PCI DSS: Experience with PCI DSS is necessary for unifying compliance requirements across payment card industry standards.
• CISA: Certification like CISA indicates a professional's expertise in auditing information systems, crucial for leading internal and external assessments.
• CISSP: The CISSP certification demonstrates broad knowledge in information security, supporting the development of comprehensive compliance strategies.
• CISM: CISM certification is relevant for managing information security programs, aligning with the role's responsibility for evolving compliance strategies.

Who this role suits

• You have a background in information security, information systems, computer science, or a related field.
• You have 7-10 years of experience specifically in compliance, assurance, audit, or risk management.
• You are adept at managing audit processes from initiation to completion.
• You have a track record of leading projects that involve multiple departments and stakeholders.

From the employer

• Own and evolve the global commercial compliance strategy across international and public sector assurance programs.
• Build scalable compliance programs that unify requirements across frameworks like ISO, SOC, and PCI.
• Lead internal audit activities and end-to-end external assessments.
• Establish compliance health metrics and dashboards.
• Provide executive-ready reporting on compliance posture and risk trends.

• Bachelor's degree in Information Security, Information Systems, Computer Science, or a related field.
• 7–10+ years of experience in compliance, assurance, audit, or risk management.
• Working knowledge of frameworks such as ISO 27001, SOC 2, PCI DSS.
• Proven ability to manage audits end-to-end.
• Strong track record of leading cross-functional initiatives.

• Comprehensive and inclusive benefits.
• Various health plans.
• Time off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks.