Senior Program Manager- FedRamp

About Zscaler

Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange is the company’s cloud-native platform that protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. 

With more than 10 years of experience developing, operating, and scaling the cloud, Zscaler serves thousands of enterprise customers around the world, including 450 of the Forbes Global 2000 organizations. In addition to protecting customers from damaging threats, such as ransomware and data exfiltration, it helps them slash costs, reduce complexity, and improve the user experience by eliminating stacks of latency-creating gateway appliances. 

Zscaler was founded in 2007 with a mission to make the cloud a safe place to do business and a more enjoyable experience for enterprise users. Zscaler’s purpose-built security platform puts a company’s defenses and controls where the connections occur—the internet—so that every connection is fast and secure, no matter how or where users connect or where their applications and workloads reside.

Supports FedRAMP, DoD Impact Levels, and StateRAMP compliance programs in accordance with the NIST, DOD SRG and other applicable guidance or requirements:

• Assists with the overall execution of compliance programs aimed at achieving and maintaining industry accreditations and certifications such as FedRAMP,  DoD IL5 and StateRamp.

• Demonstrates domain expertise in FedRAMP (Federal Risk Authorization Management Program), NIST SP 800-53 Rev 5, NIST SP 800-37, DoD CC SRG, NIST RMF (Risk Management Framework), supporting Systems Security Assessment and Authorization (SA&A) for Federal Agencies, NIST FIPS 199 & Data Classification.

• Provides support to the compliance audit and assessment efforts to include with external third-party auditors with evidence collection and upload, auditor interview support, and auditor walk-throughs of policies, procedures, and related compliance and security documentation through various intranet portals and sites

• Assists with performing and managing security impact analyses (SIAs) and mapping technical implementation of changes to impacted NIST security controls.  

• Performs cross-functional interviews with Operations and SecOps teams to determine if system security controls are implemented correctly, operating as intended, and producing the desired outcome. 

• Demonstrates a strong working knowledge of FedRAMP management, operational and technical security control and supplemental guidance. Has a strong track record and experience writing security control implementation details in the System Security Plan package.

• Demonstrates the capability to coordinate with the Zscaler Third Party Assessment Organization (3PAO) in support of security control assessments.

• Also support Zscaler's Compliance programs in both Public and Private sectors aligned with FedRAMP, SOC 2, CSA STAR and ISMS aligned with ISO27001, ISO 27017, ISO27701 and ISO 27018 certifications

Qualifications

• 5 to 8 years of working experience on different compliance frameworks: FedRAMP, NIST, DoD Cloud Computing Security Requirements Guide (SRG)

• Experience in program or project management, auditing, and/or control framework development and implementation

• Strong understanding of Industry standard compliance frameworks and Cyber Security Best Practices

• Experience in compliance management related activities including Policy, Procedures and Standards documentation

• Knowledge in AWS & Azure environments

• Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) preferred

• Bachelor or Masters in Information Technology or Relevant field Skills and Experience

 

#LI-REMOTE

 

#LI-CM3

Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations and could be higher or lower based on a multitude of factors, including job-related skills, experience, and relevant education or training.

The base salary range listed for this full-time position excludes commission/ bonus/ equity (if applicable) + benefits.

Base Pay Range$129,500—$185,000 USD

Zscaler is proud to be an equal opportunity and affirmative action employer. We celebrate diversity and are committed to creating an i