Responsibilities:

• Build and leverage threat models to secure core cloud platform services
• Establish protections/requirements to enable product team usage of emergent cloud features
• Co-author next generation cloud platform designs accounting for evolving threat and product landscapes
• Describe solutions intent within the solutions associated operating environment, determine the primary systems/subsystems & their interfaces, and define functional & non-functional requirements 
• Ensure solutions are fit for purpose and ensure their use by working with stakeholders, vendors/service providers, and evaluating the impact of strategic design decisions 
• Contribute to the development of best practices including standardized templates 
• Work with Product Managers/Owners to plan and prioritize technology focused backlog items for the architecture runway to enable business epics/features and expand into new opportunities 
• Clarify the architecture for the engineering teams to support implementation and provide solutions to resolve any architectural impediments
• Perform both design and code reviews to ensure all functional & non-functional requirements for a solution are sufficiently met (e.g., security, scalability, usability, reliability, maintainability, and performance) 
• Develop security patterns, standards, and architectural decision records to ensure Netskope data at rest, in motion or in use is properly secured. 
• Design and develop data security architectures for cloud and cloud/hybrid-based systems. 

Requirements:

• Experience designing and implementing security services/solutions which were applied to GCP, Azure, and AWS
• In-depth knowledge of cloud platforms, Linux, and security at scale
• Experience working with engineering product teams and bringing solutions to market
• Demonstrated capabilities to effectively communicate and collaborate with diverse teams
• Understanding of compliance needs and evidence collection
• Moderate ability to create scripts, perform automation, and aggregate data for analysis
• A combination of confidence and independence…with the prudence to know when to ask for help
• Demonstrates flexibility within a variety of changing situations, while working with individuals and groups.
• Minimum 10+ years of experience building and managing security infrastructure and solutions in the financial industries
• Strong ability to effectively communicate with and present to the senior leadership team
• Experience with assessment, development, implementation, integration, optimization, and documentation of a comprehensive and broad set of security technologies and processes in on premise, public, private, and hybrid cloud environments •
• Experience with Hybrid cloud architectures and designs
• Must have experience with Internet Application Hosting architectures, best practices, and related technologies to effectively protect externally facing applications
• Experience with DevSecOps process, Infrastructure as Code/Policy as Code, Container technologies (Docker, Kubernetes), API Gateways, and other common web application technologies is preferred
• Strong knowledge of enterprise security concepts/frameworks and products, secure design principles and best practices
• FedRAMP, NIST 800-53, NIST 800-190, CSA, CIS Benchmarks, ISO 27000 series, COBIT, etc.
• Good written and verbal communication skills a must.
• Must be able to design and create technical solution/process documentation quickly and succinctly
• Must be a self-starter, strong leader who is able to manage, develop and nurture a team of senior engineers and architects; work with limited supervision & be able to work well with others in a globally diverse IT (Information Technology) environment
• Understanding of cryptography as it relates to application, network, and cloud security
• CISSP, CCSP, TOGAF certification is preferred. Any other Information Security oriented certifications a plus.
• Any Cloud Security or Cloud Architecture certifications is preferred.

Education:

• Bachelor’s degree/University degree or equivalent experience preferred

#LI-NS1

Role Overview:

Netskope is seeking a high-caliber Privacy Engineering Staff Engineer to bridge the gap between legal compliance, data protection technology, and core product engineering. This is a dual-impact role: you will be responsible for the technical "Privacy by Design" controls for the Netskope platform while serving as a strategic deputy to the Global Privacy & Data Protection Officer (DPO).

As the Strategic Deputy to the Global Privacy & Data Protection Officer (DPO), you move beyond task completion to achieve high-level organizational influence.

• Global Compliance Strategy: Support the execution of a multi-jurisdictional privacy program that anticipates the rapid evolution of global data protection laws.
• Board & Audit Influence: Translate complex technical privacy risks into compelling, quantifiable narratives for the Audit Committee and Board of Directors.
• Risk Governance: Oversee the operational maturity of our privacy program within LogicGate, ensuring a closed-loop system of accountability, audit readiness, and incident response.
• DPIA & Rights Leadership: Act as the technical authority for high-risk Data Protection Impact Assessments (DPIAs) and ensure our Data Subject Rights (DSAR) engine operates at optimal efficiency.

You will be the lead privacy architect ensuring that Netskope’s innovation is inherently respectful of data.

• Component Design Review: Lead the privacy-first technical review of every new component within the Netskope platform, engaging with engineering at the "whiteboard phase" to eliminate risks before they reach production.
• PET Implementation: Direct the integration of Privacy Enhancing Technologies (PETs) such as differential privacy, homomorphic encryption, and k-anonymity into the Netskope product suite.
• AI Governance Leadership: Hold a seat on the AI Governance Committee whilst supporting the AI Ambassador program to ensure that AI innovations are built on a foundation of responsible data use.
• Technical Data Defense: Enhance DLP, DSPM, and AI/ML-driven security within our AWS and corporate environments to set the "Gold Standard" for internal data protection.

Key Responsibilities

Product Privacy Engineering & PETs

• Architectural Oversight: Review all new component designs within the Netskope platform to ensure structural compliance with "Privacy by Design" principles.
• PET Integration: Lead the design and implementation of Privacy Enhancing Technologies (PETs) such as differential privacy, homomorphic encryption, or k-anonymity within Netskope product features.
• Early Engagement: Act as a dedicated privacy consultant to product engineering teams during the ideation phase to identify and mitigate privacy risks before code is written.

Deputy Data Protection Officer (DPO) Functions

• Regulatory Support: Support the DPO in managing multi-jurisdictional compliance as the number of global privacy laws continues to rise.
• DPIA Leadership: Conduct and oversee Data Protection Impact Assessments (DPIAs) for high-risk processing activities, ensuring they meet the standard of global regulations.
• Privacy Leadership: Engagement with Netskope customers and partners on privacy and data protection concerns. Provide executive leadership to CISO, Legal and Privacy teams for some of the largest and most prestigious organizations in the world.

Technical Data Protection & AI Governance

• Advanced Controls: Utilize DLP (Data Loss Prevention) and DSPM (Data Security Posture Management) to secure the corporate data lifecycle.
• AI/ML Security: Implement data protection strategies specifically for AI/ML workloads, managing risks associated with training data and model inference.
• AI Advocacy: Serve on the AI Governance Committee and support the AI Ambassador program, fostering a culture of responsible AI use across the organization.

Platform Management

• LogicGate Administration: Manage and optimize the privacy module within LogicGate to track risks, audits, and compliance tasks.
• Netskope Corp Tenant: Take administrative responsibility of the Netskope corporate tenant’s privacy controls, ensuring our own use of the platform is a "Gold Standard" for customers.

Technical Requirements

• AWS Cloud Expertise:
• Cloud-Native Data Protection
• Infrastructure Security
• DSPM Integration.
• Software Engineering Fundamentals.
• API
• Data Architecture Knowledge
• AI/ML

Leadership Competencies & Soft Skills

• Strategic Influence: Ability to translate complex technical privacy risks into business-level impacts for the Audit Committee and Executive Leadership.
• Collaborative Engineering: Proven track record of building "security-first and privacy-first" cultures within engineering teams without slowing down the development lifecycle.
• Ethical Leadership: Strong judgment and integrity, particularly when serving on the AI Governance Committee to balance innovation with ethical data use.
• Stakeholder Management: Excellent communication skills to manage relationships with third-party vendors, legal counsel, and regulators.

Candidate Profile & Qualifications

• Experience: 5+ years in senior technical roles, preferably with a background in security engineering, privacy engineering, or data governance.

#LI-CS1