# Principal Security & Privacy Compliance Architect

**Company**: Zscaler
**Location**: Santa Clara, California
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $196,000-$245,000 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/zscaler/jobs/5292785007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/principal-security-and-privacy-compliance-44dfda65-95c/

## Description

Zscaler is looking for a Principal Security and Privacy Compliance Architect to join its team. This is a Hybrid role, reporting to the Director, Technology Risk & Compliance in the Compliance Architect department. In this role, you will bridge technical architecture, product engineering, legal privacy counsel, and federal/commercial compliance mandates to shape and scale security and privacy operational compliance across highly regulated cloud environments.

Responsibilities:

- Lead the design, implementation, and continuous maturity of security and privacy compliance architecture across multi-cloud environments subject to SOC 2, C5, GDPR, ISO 27701, FedRAMP High, and DoD IL5

- Lead and approve cross-border transfer and data residency design patterns, operationalizing unified privacy control catalogs into actionable engineering specifications

- Facilitate end-to-end privacy and data security risk evaluations and serve as the primary technical liaison to Privacy Legal for post-incident remediation and corrective actions

- Evaluate corporate and product-embedded AI/ML integrations against emerging frameworks, validating technical safeguards and model controls

- Serve as the Principal Compliance Architect SME for all privacy compliance initiatives supporting 3PAOs, external regulatory auditors, enterprise customers, and internal engineering teams

Requirements:

- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions

- 8+ years of progressive experience in Privacy Engineering and Information Security within cloud-native enterprise environments

- Proven operational mastery of GDPR, CCPA/CPRA, international cross-border transfer, SOC 1/SOC 2, C5, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, NIST SP 800-53, FedRAMP, and DoD SRG (IL4/IL5)

- Strong working knowledge of major public cloud service providers, AI/ML platforms, containerized environments, modern IAM, and Zero Trust network architectures

- Demonstrated track record of conducting rigorous security/privacy design reviews, data-flow mapping, PII lifecycle evaluations, threat modeling, and third-party vendor risk assessments

Benefits:

- Various health plans

- Time off plans for vacation and sick time

- Parental leave options

- Retirement options

- Education reimbursement

- In-office perks, and more!

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI/ML technologies
- Privacy Engineering
- Information Security
- GDPR
- CCPA/CPRA
- SOC 1/SOC 2
- C5
- ISO/IEC 27001
- ISO/IEC 27701
- ISO/IEC 42001
- NIST SP 800-53
- FedRAMP
- DoD SRG (IL4/IL5)
- public cloud service providers
- AI/ML platforms
- containerized environments
- modern IAM
- Zero Trust network architectures

### Nice to have
- leveraging AI technologies and workflows to drive measurable operational efficiency
- designing and deploying AI-forward automated solutions for continuous control monitoring
- establishing technical privacy governance for generative AI/LLM architectures
- sovereign cloud deployments
- automated data discovery/classification pipelines
- CIPT
- CIPP/US
- CIPP/E
- CIPM
- CDPSE
- CISSP
- CCSP
- CRISC

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/zscaler/jobs/5292785007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)