Senior Director, Head of Cybersecurity & Privacy Legal

About Zscaler Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise, we are constantly pushing the envelope, leveraging the world’s largest security data lake to power our cloud-native Zero Trust Exchange platform. This innovation protects our customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Here, impact in your role matters more than title and trust is built on results. We say, impact over activity. We seek innovators who actively use AI to amplify their impact and who thrive in an environment where we leverage intelligent systems to stay ahead of evolving threats. We believe in transparency and value constructive, honest debate—we’re focused on getting to the best ideas, faster. We build high-performing teams that can make an impact quickly and with high quality. To do this, we are building a culture of execution centered on customer obsession, collaboration, ownership, and accountability. We value high-impact, high-accountability with a sense of urgency where you’re enabled to do your best work and embrace your potential. If you’re driven by purpose, thrive on solving complex challenges, and want to be part of the team that’s helping to secure the AI age, we invite you to bring your talents to Zscaler and help shape the future of cybersecurity. We are looking for a Senior Director, Head of Cybersecurity & Privacy Legal to lead our global data security and privacy legal function. Reporting directly to the Deputy General Counsel for Commercial Legal, you will be the primary legal architect for how we protect data across the entire Zscaler platform. This role is ideally Hybrid out of our San Jose, CA Headquarters, but can be fully remote for the right candidate. This is a high-impact senior leadership role where you will develop and execute a global legal strategy for cybersecurity, data security and privacy that aligns with Zscaler’s rapid growth and product innovation. You will be a trusted advisor to senior leaders across the organization, including the executive team and board of directors. What you’ll do (Role Expectations) As a key partner to our Security, Compliance, IT, and other internal teams, you will - Provide expert guidance on a wide range of data security, cybersecurity, privacy, and compliance matters, ensuring that legal requirements are integrated seamlessly into our technical operations - Lead the legal side of incident management and response, providing strategic advice and legal guidance on all types of incidents to ensure the company navigates complex security events with precision and speed - Provide strategic guidance and recommendations for implementing Privacy/Security by Design across our expanding platform - Manage and mentor the existing privacy team consisting of four experienced privacy lawyers What We’re Looking for (Minimum Qualifications) - J.D. from an accredited law school and an active license to practice law in the United States - 15+ years of experience practicing law with a deep focus on data security, cybersecurity, and privacy within the SaaS, Software, Tech, and/or Cybersecurity sectors - Significant experience managing cyber incident response, in close partnership with Security professionals - Significant experience negotiating the security and privacy components of complex inbound and outbound commercial contracts - Experience advising executive leadership and boards of directors on cybersecurity and privacy matters - Experience providing guidance and implementing Privacy/ Security by Design across a technology company - Experience managing a global team of lawyers and guiding cross-functional initiatives in a SaaS, Software, Tech, and/or Cybersecurity company - A deep understanding of cloud architecture and how data flows through a modern SaaS ecosystem - A deep understanding of global privacy and AI laws, regulations, and certifications including GDPR, CCPA/CPRA, EU AI Act, and other international cybersecurity, data protection, privacy and AI frameworks - A pragmatic approach to law that prioritizes business enablement; you are someone who finds creative paths to growth while rigorously managing risk What Will Make You Stand Out (Preferred Qualifications) - Experience working with EU Works Councils and other global regulatory agencies/bodies - Experience with AI governance and machine learning data ethics - Experience with risk mitigation frameworks and corporate governance models for the enterprise-wide deployment of generative AI, large language models (LLMs), and automated decision-making systems - Relevant certifications such as CISM, CISSP, and/or CIPP #LI-Remote #LI-NH1 Zscaler’s salary ranges are benchmarked and are determined by role and level. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries

J.D. from an accredited law school and an active license to practice law in the United States. 15+ years of experience practicing law with a deep focus on data security, cybersecurity, and privacy within SaaS, software, tech, and/or cybersecurity sectors. Significant experience managing cyber incident response, in close partnership with security professionals. Significant experience negotiating the security and privacy components of complex inbound and outbound commercial contracts. Experience advising executive leadership and boards of directors on cybersecurity and privacy matters. Experience providing guidance and implementing Privacy/Security by Design across a technology company. Experience managing a global team of lawyers and guiding cross-functional initiatives in a SaaS, software, tech, and/or cybersecurity company. Deep understanding of cloud architecture and data flows in a modern SaaS ecosystem. Deep understanding of global privacy and AI laws, regulations, and certifications including GDPR, CCPA/CPRA, EU AI Act, and other international frameworks. Pragmatic approach to law that prioritizes business enablement while managing risk.

Provide expert guidance on data security, cybersecurity, privacy, and compliance matters; ensure legal requirements are integrated into technical operations. Lead the legal side of incident management and response, offering strategic and legal guidance during security events. Provide strategic guidance for implementing Privacy/Security by Design across the platform. Manage and mentor the privacy team consisting of four privacy lawyers.