Principal Security & Privacy Compliance Architect

Zscaler is looking for a Principal Security and Privacy Compliance Architect to join its team. This is a Hybrid role, reporting to the Director, Technology Risk & Compliance in the Compliance Architect department. In this role, you will bridge technical architecture, product engineering, legal privacy counsel, and federal/commercial compliance mandates to shape and scale security and privacy operational compliance across highly regulated cloud environments.

Responsibilities:

• Lead the design, implementation, and continuous maturity of security and privacy compliance architecture across multi-cloud environments subject to SOC 2, C5, GDPR, ISO 27701, FedRAMP High, and DoD IL5
• Lead and approve cross-border transfer and data residency design patterns, operationalizing unified privacy control catalogs into actionable engineering specifications
• Facilitate end-to-end privacy and data security risk evaluations and serve as the primary technical liaison to Privacy Legal for post-incident remediation and corrective actions
• Evaluate corporate and product-embedded AI/ML integrations against emerging frameworks, validating technical safeguards and model controls
• Serve as the Principal Compliance Architect SME for all privacy compliance initiatives supporting 3PAOs, external regulatory auditors, enterprise customers, and internal engineering teams

Requirements:

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions
• 8+ years of progressive experience in Privacy Engineering and Information Security within cloud-native enterprise environments
• Proven operational mastery of GDPR, CCPA/CPRA, international cross-border transfer, SOC 1/SOC 2, C5, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, NIST SP 800-53, FedRAMP, and DoD SRG (IL4/IL5)
• Strong working knowledge of major public cloud service providers, AI/ML platforms, containerized environments, modern IAM, and Zero Trust network architectures
• Demonstrated track record of conducting rigorous security/privacy design reviews, data-flow mapping, PII lifecycle evaluations, threat modeling, and third-party vendor risk assessments

Benefits:

• Various health plans
• Time off plans for vacation and sick time
• Parental leave options
• Retirement options
• Education reimbursement
• In-office perks, and more!