Sr. Infrastructure & Cybersecurity Compliance Manager

Who We Are

Born from a mission to make prescription eyewear affordable and accessible to everyone, Zenni Optical has been changing the way people see the world since 2003. With complete prescription pairs for adults and kids starting at under $10, we’ve grown into a global brand with over 51 million pairs of glasses sold — and counting!

Based in the San Francisco Bay Area, we're proud to be the Official Eyewear of the San Francisco 49ers, Boston Celtics, Monster Jam, Ghost Gaming, TSM, Major League Pickleball and more. We've also partnered with tastemakers and designers like Chase Stokes, Jrue Holiday, and George and Claire Kittle to bring our brand to life in bold, meaningful ways.

Innovation is at the heart of everything we do at Zenni — from our revolutionary EyeQLenz™ with Zenni ID Guard™  glasses to our cutting-edge VR Vision Screener, we're constantly exploring new ways to improve vision and enhance lives. For more information, please visit zenni.com/press.

Candidate safety is important to us. Please note that all official communication will only be sent from @zennioptical.com addresses.

About the Role:

The Sr. Infrastructure & Cybersecurity Compliance Manager will oversee Zenni Optical’s Technology compliance reporting operations. This hands-on role requires a balance of industry expertise, business acumen, and technical understanding to strengthen and mature our compliance reporting processes. This role will partner with internal teams and external vendors to proactively address compliance risks, ensure adherence to regulatory standards, and drive process improvements across cloud-native environments.

This position will report to our Manager, Information Technology and play a critical role in safeguarding Zenni’s technology platforms, mentoring technical staff, and building a scalable compliance framework to support our growth.  This role will be a hybrid working arrangement with a minimum of 3 days on-site required at our Novato, CA location.

Responsibilities:

• Lead technology compliance reporting operations and proactively address potential non-compliance issues.
• Drive adoption of cloud security and compliance frameworks, standard control baselines, and best practices.
• Conduct gap analyses against control baselines and implement corrective controls.
• Establish and maintain a compliance risk register for Technology.
• Collaborate with cross-functional teams to ensure compliance controls are effectively designed and implemented.
• Provide expertise on frameworks such as HIPAA, SOC 2, PCI DSS, SOX, NIST, CIS, and CoBIT.
• Partner with vendors and internal teams during compliance analysis and remediation.
• Serve as both a principal and technical mentor to internal teams.
• Stay current on regulations, standards, and best practices in cloud security and data privacy.
• Communicate effectively with auditors, regulators, and other compliance stakeholders.
• Support continuous improvements to compliance policies, procedures, and reporting tools

Basic Qualifications:

• Bachelor’s degree in Technology, Information Security, or a related field—or equivalent experience.
• 7+ years of experience in Technology Compliance, IT Audit, or related roles.
• Strong knowledge of security compliance frameworks (SOX, NIST, CIS, HIPAA, SOC2, PCI DSS, CoBIT).
• Proven ability to lead compliance reporting in cloud-native environments.
• Strong business and technical requirements analysis skills.
• Excellent written and verbal communication skills.
• Strong organizational skills, with attention to detail and ability to manage multiple priorities.
• Proficiency with Microsoft Office and Google Workspace

Preferred Qualifications:

• Advanced degree in Information Security, Technology Management, or related discipline.
• Certifications such as CISM, CISA, CRISC, PCI Assessor, or ITIL.
• Experience managing third-party vendors for compliance and risk programs.
• Demonstrated leadership and team-building experience.
• Strong conflict management and interpersonal skills.
• Experience with emerging security compliance and data privacy concepts

U.S. Perks & Benefits:

• Annual Bonus Program
• Healthcare: 100% medical, dental, and v