Job Details

Sr. Infrastructure & Cybersecurity Compliance Manager

Who We Are

Born from a mission to make prescription eyewear affordable and accessible to everyone, Zenni Optical has been changing the way people see the world since 2003. With complete prescription pairs for adults and kids starting at under $10, we've grown into a global brand with over 51 million pairs of glasses sold — and counting!

Based in the San Francisco Bay Area, we're proud to be the Official Eyewear of the San Francisco 49ers, Boston Celtics, Monster Jam, Ghost Gaming, TSM, Major League Pickleball and more. We've also partnered with tastemakers and designers like Chase Stokes, Jrue Holiday, and George and Claire Kittle to bring our brand to life in bold, meaningful ways.

Candidate safety is important to us. Please note that all official communication will only be sent from @zennioptical.com addresses.

About the Role

The Sr. Infrastructure & Cybersecurity Compliance Manager will oversee Zenni Optical's Technology compliance reporting operations. This hands-on role requires a balance of industry expertise, business acumen, and technical understanding to strengthen and mature our compliance reporting processes. This role will partner with internal teams and external vendors to proactively address compliance risks, ensure adherence to regulatory standards, and drive process improvements across cloud-native environments.

This position will report to our Manager, Information Technology and play a critical role in safeguarding Zenni's technology platforms, mentoring technical staff, and building a scalable compliance framework to support our growth. This role will be a hybrid working arrangement with a minimum of 3 days on-site required at our Novato, CA location.

Responsibilities

• Lead technology compliance reporting operations and proactively address potential non-compliance issues.
• Drive adoption of cloud security and compliance frameworks, standard control baselines, and best practices.
• Conduct gap analyses against control baselines and implement corrective controls.
• Establish and maintain a compliance risk register for Technology.
• Collaborate with cross-functional teams to ensure compliance controls are effectively designed and implemented.
• Provide expertise on frameworks such as HIPAA, SOC 2, PCI DSS, SOX, NIST, CIS, and CoBIT.
• Partner with vendors and internal teams during compliance analysis and remediation.
• Serve as both a principal and technical mentor to internal teams.
• Stay current on regulations, standards, and best practices in cloud security and data privacy.
• Communicate effectively with auditors, regulators, and other compliance stakeholders.
• Support continuous improvements to compliance policies, procedures, and reporting tools.

Basic Qualifications

• Bachelor's degree in Technology, Information Security, or a related field—or equivalent experience.
• 7+ years of experience in Technology Compliance, IT Audit, or related roles.
• Strong knowledge of security compliance frameworks (SOX, NIST, CIS, HIPAA, SOC2, PCI DSS, CoBIT).
• Proven ability to lead compliance reporting in cloud-native environments.
• Strong business and technical requirements analysis skills.
• Excellent written and verbal communication skills.
• Strong organizational skills, with attention to detail and ability to manage multiple priorities.
• Proficiency with Microsoft Office and Google Workspace

Preferred Qualifications

• Advanced degree in Information Security, Technology Management, or related discipline.
• Certifications such as CISM, CISA, CRISC, PCI Asessor, or ITIL.
• Experience managing third-party vendors for compliance and risk programs.
• Demonstrated leadership and team-building experience.
• Strong conflict management and interpersonal skills.
• Experience with emerging security compliance and data privacy concepts.
• Annual Bonus Program
• Healthcare: 100% medical, dental, and vision coverage for employees (50% for dependents)
• 401k with 4% employer match
• Generous PTO in addition to Week of Zen
• Fully Paid Parental Leave - 16 weeks for birthing and non-birthing parents
• Tech Stipend - $50 USD per payroll towards tech & cell phone expenses
• Annual Zenni Gift Card

Compensation

In addition to other forms of compensation like perks and benefits, the estimated range for this role is $136,100 to $158,000. The final offer will be determined based on permissible, non-discriminatory factors such as skill set, experience, geographical location, market conditions, and other organizational needs. The Company reserves the right to change, modify, or revisit the salary range for various reasons including business needs.

We look forward to hearing from you!

Zenni Optical is an equal opportunity workplace and considers applications without regard to race, color, national origin, gender identity, sexual orientation, age, citizenship, marital status, disability, or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Zenni Optical is an equal opportunity employer. We do not discriminate on the basis of protected status. If you require accommodations during the application process, please contact us.

We encourage you to apply even if you don't feel you meet all the qualifications.