Principal Security & Privacy Compliance Architect

• →Lead the design, implementation, and continuous maturity of security and privacy compliance architecture across multi-cloud environments subject to SOC 2, C5, GDPR, ISO 27701, FedRAMP High, and DoD IL5
• →Lead and approve cross-border transfer and data residency design patterns, operationalizing unified privacy control catalogs (NIST, ISO 27701) into actionable engineering specifications
• →Facilitate end-to-end privacy and data security risk evaluations (DPIAs, PIAs, PTAs) and serve as the primary technical liaison to Privacy Legal for post-incident remediation and corrective actions
• →Evaluate corporate and product-embedded AI/ML integrations against emerging frameworks (e.g., ISO 42001, NIST AI RMF), validating technical safeguards and model controls
• →Serve as the Principal Compliance Architect SME for all privacy compliance initiatives supporting 3PAOs, external regulatory auditors, enterprise customers, and internal engineering teams

• You thrive in ambiguity and are comfortable building the path forward in dynamic, fast-evolving environments, viewing complex challenges as opportunities to design meaningful, lasting solutions.
• You act like an owner with a strong bias for action and high integrity, navigating seamlessly between high-level architectural strategy and hands-on operational execution.
• You are a problem-solver who leans into complex technical and regulatory challenges, staying laser-focused on finding practical, scalable solutions that deliver measurable business impact.
• You are a high-trust collaborator who is ambitious for the team’s collective success, actively embracing a candid challenge culture by giving and receiving feedback with clarity, empathy, and respect.
• You are a continuous learner with an active growth mindset, proactively seeking feedback and staying ahead of shifting regulatory landscapes, cloud architectures, and modern security engineering practices.

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
• 8+ years of progressive experience in Privacy Engineering and Information Security within cloud-native enterprise environments
• Proven operational mastery of GDPR, CCPA/CPRA, international cross-border transfer, SOC 1/SOC 2, C5, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, NIST SP 800-53, FedRAMP, and DoD SRG (IL4/IL5)
• Strong working knowledge of major public cloud service providers (AWS, Azure, or GCP), AI/ML platforms, containerized environments (Kubernetes/EKS), modern IAM (SAML 2.0, OIDC, Okta), and Zero Trust network architectures
• Demonstrated track record of conducting rigorous security/privacy design reviews, data-flow mapping, PII lifecycle evaluations, threat modeling, and third-party vendor risk assessments
• Exceptional ability to distill nuanced legal and compliance obligations into concrete engineering requirements and actionable technical patterns without introducing operational drag

• Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency
• Hands-on experience designing and deploying AI-forward automated solutions for continuous control monitoring (CCM), automated evidence gathering, and compliance workflow orchestration within regulated cloud environments
• Prior experience establishing technical privacy governance for generative AI/LLM architectures, sovereign cloud deployments, and automated data discovery/classification pipelines
• Relevant professional credentials, such as CIPT, CIPP/US, CIPP/E, CIPM, CDPSE, CISSP, CCSP, or CRISC

#LI-Hybrid #LI-AJ1