Security Risk Analyst, Zoom
$87.6-186k
In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value
Work platform for human connection
Be an early applicant
Work platform for human connection
1001+ employees
Be an early applicant
$87.6-186k
In addition to the base salary and/or OTE listed Zoom has a Total Direct Compensation philosophy that takes into consideration; base salary, bonus and equity value
1001+ employees
Company mission
To help people connect, collaborate, and get more work done, together.
Role
Who you are
- Demonstrate 2+ years of experience in information security or GRC roles. Risk management experience would be a bonus
- Have knowledge of standard industry frameworks such as NIST, ISO, COBIT, FAIR, OWASP, MITRE Attack, etc
- Understand information security principles, cybersecurity technologies and best practices, and GRC processes
- Communicate complex security risks clearly to technical and non-technical stakeholders
- Organize and prioritize multiple workstreams in technical environments
- Collaborate effectively across cross-functional teams
- Possess professional certifications such as Security+, CRISC, CGRC, or Open FAIR Foundation (a bonus)
What the job involves
- Zoom is seeking a Security Risk Analyst to join our Security GRC team as we mature the Security Risk Management program and develop new capabilities
- In this role, you will assist Security Risk Engineers with identifying, analyzing, monitoring, and reporting security risks using data-driven approaches
- This includes supporting risk assessments, managing the security risk register, and collaborating closely with stakeholder teams
- Security GRC is a people-first, high-impact team that sits at the intersection of security, product, legal, and leadership. Through our standards, controls, certifications, customer assurance, and risk and vendor management programs, we enable Zoom to move faster and smarter
- We help unlock revenue through risk-based security initiatives, creative problem-solving, and strategic partnerships. Join us to help shape GRC innovation in a global tech company while working alongside thoughtful, collaborative, and deeply talented teammates!
- Triaging and evaluating security risks in accordance with NIST Risk Management Framework, FAIR, and internally established processes
- Supporting data collection, modeling, and analysis of security risks using both qualitative and quantitative methods. This work spans multiple domains, including cloud security, network security, infrastructure security, product security, endpoint security, and third-party security
- Collaborating with cross-functional stakeholders in Engineering, Legal, DevOps, IT, and Security in the prioritization and treatment of security risks
- Guiding the development and documentation of risk treatment plans in line with enterprise risk appetite
- Monitoring risk mitigation and remediation efforts and reporting on progress
- Assisting with the administration of the security risk register
Application process
- End Date: February 9, 2026
Our take
Zoom reworked video conferencing when most people assumed it was a solved problem, with services from Cisco and Skype already ubiquitous in workplaces and homes. However, its videoconferencing infrastructure was simpler to use, faster and more flexible than any previous solution, and it swiftly took the world by storm.
Its success bred competition, however, and companies such as Microsoft and Google, along with numerous smaller communications firms, have begun making inroads on Zoom's formerly commanding lead. Additionally, as workplaces are mostly adopting a hybrid or flexible working strategy, some of its importance as a workplace tool is wearing off and it is recording a gradual decline in daily usage rates.
To counter these trends, Zoom is expanding its business offerings through product development and strategic acquisitions. Alongside many other large tech companies, it has battled through a difficult economic situation, but it nonetheless remains a profitable company and household name. Plus, its track record of innovation means it is still very much one to watch in the communications space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2017
$100m
SERIES D
Feb 2015
$30m
SERIES C
Total funding: $148.5m
Company benefits
- Work from home opportunities
- Retirement benefits
- My-Time-Off (MTO), an extended vacation policy
- Employee Stock Purchase Plan (ESPP) and Restricted Stock Unit (RSU) Equity Program plus Yearly stock grant for all employees
- Wellness and fitness reimbursement, wellness resources, Thrive Global wellness app, TaskHuman wellness coaching app
- Employee Assistance Program (EAP) including emotional support, financial resources and legal guidance
- Paid Parental Leave (both parents) 16 weeks paid leave (or statutory if more generous)
- Employer Matching of Charitable contributions up to $500 USD equivalent/year
- Annual Zoom Store Allowance
- Business Travel Accident Insurance
Company HQ
Downtown San Jose, San Jose, CA
Leadership
Eric Yuan
(CEO & Founder)Previously VP Engineering at Cisco and WebEx.
Share this job
View 34 more jobs at Zoom