Z

Zscaler

Secures workforce access to apps and the internet

Principal Security and Privacy Compliance Architect

Security Governance, Risk & CompliancePosted on Nov 11
Full-timeSanta Clara, CA, USA$196k - $245k

About the Job

Requirements

  • Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within the functional domain.
  • At least 8 years of progressive experience in Privacy Engineering and Information Security within cloud-native enterprise environments.
  • Operational mastery of GDPR, CCPA/CPRA, international cross-border transfer requirements, SOC 1/SOC 2, C5, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, NIST SP 800-53, FedRAMP, and DoD SRG (IL4/IL5).
  • Working knowledge of major public cloud service providers (AWS, Azure, or GCP), AI/ML platforms, containerized environments (Kubernetes/EKS), modern IAM (SAML 2.0, OIDC, Okta), and Zero Trust network architectures.
  • A track record of conducting security and privacy design reviews, data-flow mapping, PII lifecycle evaluations, threat modeling, and third-party vendor risk assessments.
  • Ability to translate legal and compliance obligations into engineering requirements and technical patterns without introducing operational drag.

Responsibilities

  • Lead the design, implementation, and continuous maturity of security and privacy compliance architecture across multi-cloud environments subject to SOC 2, C5, GDPR, ISO 27701, FedRAMP High, and DoD IL5.
  • Lead and approve cross-border transfer and data residency design patterns, and operationalize unified privacy control catalogs (NIST, ISO 27701) into engineering specifications.
  • Facilitate end-to-end privacy and data security risk evaluations (DPIAs, PIAs, PTAs) and serve as the primary technical liaison to Privacy Legal for post-incident remediation and corrective actions.
  • Evaluate corporate and product-embedded AI/ML integrations against frameworks such as ISO 42001 and NIST AI RMF, validating technical safeguards and model controls.
  • Serve as the Principal Compliance Architect subject-matter expert for privacy compliance initiatives supporting 3PAOs, external regulatory auditors, enterprise customers, and internal engineering teams.

Desired Qualifications

  • Ability to leverage AI technologies and workflows to drive measurable operational efficiency.
  • Hands-on experience designing and deploying AI-forward automated solutions for continuous control monitoring (CCM), automated evidence gathering, and compliance workflow orchestration within regulated cloud environments.
  • Experience establishing technical privacy governance for generative AI/LLM architectures, sovereign cloud deployments, and automated data discovery/classification pipelines.
  • Relevant professional credentials such as CIPT, CIPP/US, CIPP/E, CIPM, CDPSE, CISSP, CCSP, or CRISC.

About the Company

Zscaler

Secures workforce access to apps and the internet

Zscaler builds cloud security software for organizations that need to protect employees, applications and data across offices and remote locations. Its Zero Trust Exchange checks the identity and context of each connection, inspects traffic for threats and applies access rules set by security teams. Zscaler Internet Access protects web and cloud application traffic, while Zscaler Private Access connects authorized users to specific internal applications without a VPN. Organizations buy subscriptions priced primarily by the number of users and metered usage, with related support services included in the business. Zscaler was founded in 2007 and is headquartered in Santa Clara, California.

Company size
5,001-10,000
Company stage
IPO
Headquarters
Santa Clara, CA
Founded
2007

Recently Posted Jobs

Explore more opportunities at Zscaler

See more jobs