Sr. Infrastructure & Cybersecurity Compliance Manager

About the Role:

The Sr. Infrastructure & Cybersecurity Compliance Manager will oversee Zenni Optical's Technology compliance reporting operations. This hands-on role requires a balance of industry expertise, business acumen, and technical understanding to strengthen and mature our compliance reporting processes. This role will partner with internal teams and external vendors to proactively address compliance risks, ensure adherence to regulatory standards, and drive process improvements across cloud-native environments.

This position will report to our Manager, Information Technology and play a critical role in safeguarding Zenni's technology platforms, mentoring technical staff, and building a scalable compliance framework to support our growth. This role will be a hybrid working arrangement with a minimum of 3 days on-site required at either our Obetz, Ohio or Novato, CA locations.

Responsibilities:

• Lead technology compliance reporting operations and proactively address potential non-compliance issues.
• Drive adoption of cloud security and compliance frameworks, standard control baselines, and best practices.
• Conduct gap analyses against control baselines and implement corrective controls.
• Establish and maintain a compliance risk register for Technology.
• Collaborate with cross-functional teams to ensure compliance controls are effectively designed and implemented.
• Provide expertise on frameworks such as HIPAA, SOC 2, PCI DSS, SOX, NIST, CIS, and CoBIT.
• Partner with vendors and internal teams during compliance analysis and remediation.
• Serve as both a principal and technical mentor to internal teams.
• Stay current on regulations, standards, and best practices in cloud security and data privacy.
• Communicate effectively with auditors, regulators, and other compliance stakeholders.
• Support continuous improvements to compliance policies, procedures, and reporting tools

Basic Qualifications:

• Bachelor's degree in Technology, Information Security, or a related field—or equivalent experience.
• 7+ years of experience in Technology Compliance, IT Audit, or related roles.
• Strong knowledge of security compliance frameworks (SOX, NIST, CIS, HIPAA, SOC2, PCI DSS, CoBIT).
• Proven ability to lead compliance reporting in cloud-native environments.
• Strong business and technical requirements analysis skills.
• Excellent written and verbal communication skills.
• Strong organizational skills, with attention to detail and ability to manage multiple priorities.
• Proficiency with Microsoft Office and Google Workspace

Preferred Qualifications:

• Advanced degree in Information Security, Technology Management, or related discipline.
• Certifications such as CISM, CISA, CRISC, PCI Assessor, or ITIL.
• Experience managing third-party vendors for compliance and risk programs.
• Demonstrated leadership and team-building experience.
• Strong conflict management and interpersonal skills.
• Experience with emerging security compliance and data privacy concepts

U.S. Perks & Benefits:

• Annual Bonus Program
• Healthcare: 100% medical, dental, and vision coverage for employees (50% for dependents)
• 401k with 4% employer match
• Generous PTO in addition to our Week of Zen - the time between Christmas and New Year's to relax and recuperate
• Fully Paid Parental Leave - 16 weeks for birthing and non-birthing parents
• Tech Stipend - $50 USD per payroll towards tech & cell phone expenses
• Annual Zenni Gift Card - to use towards our products!

Compensation

In addition to other forms of compensation like perks and benefits, the estimated range for this role is $136,100 to $158,000. The final offer will be determined based on permissible, non-discriminatory factors such as skill set, experience, geographical location, market conditions, and other organizational needs. The Company reserves the right to change, modify, or revisit the salary range for various reasons including business needs.