Compliance & Privacy Engineer

Location: Cupertino, CA Onsite 100%

Introduction

We are seeking a detail-oriented and proactive professional to join our team. This role sits at the intersection of data governance, privacy engineering, and regulatory compliance. The ideal candidate will be responsible for maintaining the integrity of our centralized data registry, enforcing data classification standards, and driving execution of compliance controls across multiple audit and assessment frameworks. This is a hands-on role requiring strong organizational skills, technical aptitude, and cross-functional collaboration.

Required Skills & Qualifications

• 10 years of experience in compliance engineering, data governance, privacy engineering, or a related discipline.
• Hands-on experience with data classification frameworks and metadata management in enterprise environments.
• Familiarity with regulatory and audit frameworks such as PCI DSS, PCI PIN, SOX, etc.
• Working knowledge of compliance and monitoring tools (e.g., Splunk, GitHub or similar).
• Experience with AWS cloud services and routine cloud operations.
• Strong documentation skills with proficiency in Confluence, Quip, or similar collaboration platforms.
• Excellent organizational and project management skills with the ability to track multiple workstreams simultaneously.
• Prior work experience at a client or in the client's industry.

Applicants must be able to work directly for Artech on W2.

Preferred Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, Data Engineering, or a related field.
• Experience with data privacy regulations (e.g., GDPR, CCPA) and privacy-by-design principles.
• Familiarity with vulnerability management tools and patching lifecycle processes.
• Relevant certifications such as CISA, CISM, CRISC, PCI QSA, CIPM/CIPP, or AWS certifications.
• Experience working in large-scale enterprise environments with complex data ecosystems.
• Strong cross-functional communication skills with the ability to engage both technical and non-technical stakeholders.

Day-to-Day Responsibilities

• Input, update, and validate metadata for databases and data assets within a centralized data registry.
• Apply data tags and classifications in alignment with established privacy and data governance standards.
• Review database documentation and collaborate closely with data owners, engineers, and privacy stakeholders.
• Support migration activities by mapping existing metadata to new registry schemas and standards.
• Monitor, track, and execute compliance controls across all audits and assessments.
• Track and execute recurring monthly controls including Splunk monitoring, GitHub access reviews, and patching status verification.
• Monitor compliance and governance tools for WPC operations, flagging issues and ensuring tool health.
• Monitor and track all scheduled tickets related to WPC audits and projects.
• Monitor and track patching cycles and aging vulnerabilities, coordinating remediation efforts.
• Monitor and track PCI training completion across applicable teams.
• Assist in collecting, organizing, and submitting evidence required for WPC audits.
• Maintain Confluence and Quip documentation spaces to track all internal compliance projects.
• Perform AWS routine operational tasks in support of compliance infrastructure and monitoring.

Company Benefits & Culture

• Attention to Detail— Precision in data tagging, metadata validation, and audit evidence collection.
• Collaboration — Ability to work across engineering, privacy, and compliance teams seamlessly.
• Accountability — Ownership of compliance timelines, controls, and project deliverables.
• Continuous Improvement — A mindset geared toward optimizing processes, tools, and documentation.

For immediate consideration please click APPLY to begin the screening process with Alex.