Security Compliance Specialist

The role

This role supports federal governance, risk, and compliance work. The specialist coordinates certification and authorization efforts, runs assessments with independent assessors, and helps drive continuous monitoring across the federal environment.

What you will do

• Support federal certification and authorization activities by coordinating and executing compliance assessments with independent assessors and internal stakeholders
• Drive continuous monitoring by coordinating and executing remediation efforts and ongoing compliance obligations
• Contribute to the development, refinement and execution of scalable compliance processes to support business growth

Required qualifications

• Foundational understanding of AI/ML technologies and experience leveraging, securing or positioning AI-driven solutions within your functional domain
• 5+ years of experience coordinating federal assessments, collecting and validating control evidence, and driving remediation of risks at a cloud service provider
• Deep understanding of NIST 800-53 Rev 5, FedRAMP 20X, DoD Cloud Computing SRG, CNSSI 1253, and fundamental security concepts and continuous monitoring processes
• Experience evaluating security incidents against regulatory and contractual criteria to determine reportability against U.S. Federal incident reporting obligations, documenting rationale and tracking
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity or a related field (or equivalent practical experience)
• Strong organizational, analytical and communication skills to manage multiple priorities and drive follow-through

Nice to have

• Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
• Familiarity with cloud, SaaS, PaaS and IaaS environments, including how new products or services are assessed and incorporated into an authorized boundary
• Ability to explain control objectives and control effectiveness to both technical and non-technical audiences
• Active US Government Secret or Top-Secret security clearance

Benefits

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks

Before you apply

• Must be a U.S. citizen due to the nature of customers
• Hybrid working model is referenced in the posting; the role itself is listed as Remote to US

About the company

Zscaler provides a cloud security platform, the Zero Trust Exchange, that protects customers from cyberattacks and data loss. The company describes itself as pioneering security transformation in the AI era.