Technical Compliance Analyst, Zoom

• B.S or M.S in Computer Science, Cybersecurity, Information Security, or related field, or equivalent relevant experience
• Knowledge or experience with vulnerability scanners such as Tenable, Prisma, Burp Suite, etc
• Experience with security compliance frameworks such as FedRAMP, NIST/DoD RMF, and NIST SP 800-series publications
• Experience working with testing tools such as Nessus, DISA STIGs / STIG Viewer, etc
• Knowledge of desktop, server, mobile operating systems, and cloud computing providers
• Ability to plan, organize, prioritize, work independently, and meet deadlines
• Must be a U.S. citizen or green card holder

Desirable

• In this role, you'll have the opportunity to work on compelling and high-impact projects that maintain Zoom for Government compliance with DoD and FedRAMP guidelines
• As a valued team member, you'll collaborate with talented professionals while contributing to Zoom's success in government sectors. We encourage you to share your innovative ideas, think outside the box, and create meaningful impact within the organization
• You will join a dynamic team dedicated to managing vulnerability and compliance for Zoom for Government
• Our team fosters collaboration, creativity, and transparent communication, ensuring every member can contribute meaningfully to our collective success
• We embrace innovation and agile execution while supporting one another in achieving both personal and team objectives. Here, you'll discover an inclusive and engaging environment where every team member is valued and empowered to maximize their potential
• Validate and drive vulnerability remediation for discovered vulnerabilities
• Build the bridges between security and compliance by working directly with operations teams, infrastructure teams, security teams, related Zoom teams, and Government authorizing officials
• Interact with senior levels of government agencies
• Conduct security assessments, significant change requests, and attestations
• Work as an internal auditor for the organization’s infrastructure and services
• Develop technical knowledge of control implementation
• Improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness
• Communicate requirements effectively to internal and external stakeholders
• Serve as a liaison between agencies/auditors and internal teams regarding compliance issues and solutions
• Support the Security Operations team in resolving audit and vulnerability findings
• Meet regularly with technical teams to follow up on patching cadence
• Implement automated monitoring and alerting on continuous compliance tasks
• Report continuous monitoring documentation to associated organizations (FedRAMP, StateRAMP, DISA) on a monthly basis
• Effectively recognize and mitigate threats by performing relevant research and data analysis
• Report security incidents
• Perform other duties as needed

• End Date: April 14, 2025