Principal Security & Privacy Compliance Architect
Zscaler · Santa Clara, California, USA
About this role
**Principal Security & Privacy Compliance Architect** **About Zscaler** Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location—distributed across 200+ public data centers globally and thousands of private sites at the edge. **Role** We’re looking for a **Principal Security & Privacy Compliance Architect** to join our team. This is a **Hybrid** role (**3 days/week, Santa Clara HQ**), reporting to the **Director, Technology Risk & Compliance** in the **Compliance Architect** department. In this role, you’ll bridge technical architecture, product engineering, legal privacy counsel, and federal/commercial compliance mandates to shape and scale security and privacy operational compliance across highly regulated cloud environments. You’ll translate complex regulatory frameworks into practical technical and operational solutions, support critical system authorization efforts, elevate control maturity, and establish scalable compliance practices that enable sustainable business growth. **What you’ll do (Role Expectations)** - Lead the design, implementation, and continuous maturity of security and privacy compliance architecture across multi-cloud environments subject to **SOC 2, C5, GDPR, ISO 27701, FedRAMP High, and DoD IL5** - Lead and approve cross-border transfer and data residency design patterns; operationalize unified privacy control catalogs (**NIST, ISO 27701**) into actionable engineering specifications - Facilitate end-to-end privacy and data security risk evaluations (**DPIAs, PIAs, PTAs**) and serve as the primary technical liaison to **Privacy Legal** for post-incident remediation and corrective actions - Evaluate corporate and product-embedded **AI/ML** integrations against emerging frameworks (e.g., **ISO 42001, NIST AI RMF**), validating technical safeguards and model controls - Serve as the **Principal Compliance Architect SME** for all privacy compliance initiatives supporting **3PAOs**, external regulatory auditors, enterprise customers, and internal engineering teams **Who you are (Success Profile)** - Thrive in ambiguity and build the path forward in dynamic, fast-evolving environments - Act like an owner with a bias for action and high integrity—balancing architectural strategy with hands-on execution - Solve complex technical and regulatory challenges with practical, scalable solutions and measurable impact - High-trust collaborator who embraces a candid challenge culture with clear, empathetic feedback - Continuous learner with an active growth mindset, staying ahead of shifting regulatory landscapes and security engineering practices **What we’re looking for (Minimum Qualifications)** - Foundational understanding of **AI/ML** technologies and experience leveraging, securing, or positioning AI-driven solutions - **8+ years** of progressive experience in **Privacy Engineering** and **Information Security** within cloud-native enterprise environments - Proven operational mastery of **GDPR, CCPA/CPRA, international cross-border transfer, SOC 1/SOC 2, C5, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, NIST SP 800-53, FedRAMP, and DoD SRG (IL4/IL5)** - Strong working knowledge of major public cloud providers (**AWS, Azure, or GCP**), AI/ML platforms, containerized environments (**
Listing freshness
CronJobs last confirmed this listing 58m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.