Security Engineer III (Compliance & Privacy Engineer)
1 month ago
Cupertino
Job DescriptionPosition Title: Security Engineer III (Compliance & Privacy Engineer) Location: Cupertino CA - ONSITE 100% Interview: Video Duration: 12+ months Good understand of Engineering compliance and privacy plus a little technical skills programing PCI and DSS experience Job Description: About the Role We are seeking a detail-oriented and proactive Compliance & Privacy Engineer to join our team. This role sits at the intersection of data governance, privacy engineering, and regulatory compliance. The ideal candidate will be responsible for maintaining the integrity of our centralized data registry, enforcing data classification standards, and driving execution of compliance controls across multiple audit and assessment frameworks. This is a hands-on role requiring strong organizational skills, technical aptitude, and cross-functional collaboration. Key Responsibilities: Data Registry & Privacy Governance • Metadata Management: Input, update, and validate metadata for databases and data assets within a centralized data registry, ensuring all entries are current and accurate., • Data Classification & Tagging: Apply data tags and classifications (e.g., data type, sensitivity level, personal data indicators) in alignment with established privacy and data governance standards., • Stakeholder Collaboration: Review database documentation and collaborate closely with data owners, engineers, and privacy stakeholders to ensure accurate and comprehensive metadata capture., • Migration Support: Support migration activities by mapping existing metadata to new registry schemas and standards, ensuring continuity and compliance during transitions., • Compliance Controls Execution: Monitor, track, and execute compliance controls across all audits and assessments, ensuring timely completion and adherence to regulatory requirements., • Monthly Controls Management: Track and execute recurring monthly controls including but not limited to Splunk monitoring, GitHub access reviews, patching status verification, and baseline compliance checks., • Tooling & Platform Monitoring: Actively monitor compliance and governance tools (e.g., Compass, Verdad, Plato) for WPC (Worldwide Privacy & Compliance) operations, flagging issues and ensuring tool health., • Audit & Project Tracking: Monitor and track all scheduled tickets related to WPC audits and projects, ensuring milestones are met and blockers are escalated promptly., • Vulnerability & Patch Management: Monitor and track patching cycles, aging vulnerabilities, and vulnerability reports, coordinating remediation efforts with relevant engineering teams., • Training Compliance: Monitor and track PCI training completion across applicable teams, ensuring all personnel maintain required certifications and awareness., • Evidence Collection: Assist in collecting, organizing, and submitting evidence required for WPC audits, including but not limited to PCI, PCI PIN, APN, SOX etc assessments., • Documentation & Project Management: Maintain Confluence and Quip documentation spaces to track all internal compliance projects, issues, progress, and follow-ups. Serve as a project management point of contact for internal compliance initiatives, driving accountability and visibility., • 10+ years of experience in compliance engineering, data governance, privacy engineering, or a related discipline., • Hands-on experience with data classification frameworks and metadata management in enterprise environments., • Familiarity with regulatory and audit frameworks such as PCI DSS, PCI PIN, SOX etc, • Working knowledge of compliance and monitoring tools (e.g., Splunk, GitHub or similar)., • Experience with AWS cloud services and routine cloud operations., • Strong documentation skills with proficiency in Confluence, Quip, or similar collaboration platforms., • Bachelor's degree in Computer Science, Information Security, Data Engineering, or a related field., • Experience with data privacy regulations (e.g., GDPR, CCPA) and privacy-by-design principles., • Familiarity with vulnerability management tools and patching lifecycle processes., • Relevant certifications such as CISA, CISM, CRISC, PCI QSA, CIPM/CIPP, or AWS certifications., • Experience working in large-scale enterprise environments with complex data ecosystems., • Attention to Detail — Precision in data tagging, metadata validation, and audit evidence collection., • Collaboration — Ability to work across engineering, privacy, and compliance teams seamlessly., • Accountability — Ownership of compliance timelines, controls, and project deliverables., • Continuous Improvement — A mindset geared toward optimizing processes, tools, and documentation. #TB_EN #ZR #Linkd Why TalentBurst? At TalentBurst, we deliver more than talent, we deliver outcomes. We partner with you to move quickly and connect you to opportunities aligned with your skills and long term growth. Backed by precision, transparency, and results, we connect top talent with leading organizations through trusted partnerships. We offer competitive compensation and comprehensive benefits, including medical, dental, vision, and retirement options. TalentBurst is an equal opportunity employer committed to an inclusive and diverse workforce. Company DescriptionFounded in 2002 by three former Monster.com executives; TalentBurst is an award-winning full-service Staffing Firm working directly with Fortune 500 companies in the US and Canada. We specialize in Contract and Contract to Permanent roles across many industries and have direct/contractual relationships with all our clients. Please visit our website or come meet us at our offices in Natick, MA, Miami, FL, Christiansburg, VA, Vineland, NJ, Houston, TX & downtown San Francisco, CAFounded in 2002 by three former Monster.com executives; TalentBurst is an award-winning full-service Staffing Firm working directly with Fortune 500 companies in the US and Canada. We specialize in Contract and Contract to Permanent roles across many industries and have direct/contractual relationships with all our clients. Please visit our website or come meet us at our offices in Natick, MA, Miami, FL, Christiansburg, VA, Vineland, NJ, Houston, TX & downtown San Francisco, CA