Cyber - Data Protection Zscaler Architect - Manager - Consulting

Location: Anywhere in Country   At EY, we’re all in to shape your future with confidence.    We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help to build a better working world.

The opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on designing secure, resilient, and well-governed zero trust environments. As a Manager within the Data Protection and Privacy team, you will serve as a Zscaler Architect and engagement leader with broad expertise across secure access service edge, zero trust network access, secure internet access, cloud and branch security, digital experience, and data protection. Zscaler experience is required, and the role is intended for an overall architect who can connect the Zscaler platform with identity, endpoint, network, cloud, security operations, data governance, and relevant third-party technologies.   The Manager is expected to own end-to-end solution architecture for defined engagements, establish cross-platform design direction, manage multidisciplinary delivery teams, oversee quality and financial performance, develop trusted client relationships, and contribute to business development. You will help clients translate business, security, privacy, legal, regulatory, and technology requirements into integrated zero trust strategies, target-state architectures, roadmaps, governance models, and implementation programs.   Your key responsibilities As a Manager on the Data Protection and Privacy team, your key responsibilities would include:

Lead Zscaler security and data protection engagements from discovery and solution shaping through architecture, implementation oversight, testing, deployment, operational transition, and benefits realization. Own end-to-end solution architecture across the Zscaler Zero Trust Exchange, including Zscaler Internet Access, Zscaler Private Access, Zscaler Digital Experience, Zscaler Client Connector, cloud security, branch security, workload security, and related data protection capabilities. Design secure internet and SaaS access architectures, including secure web gateway, cloud access security broker, cloud firewall, sandboxing, SSL inspection, browser isolation, advanced threat protection, and policy enforcement patterns. Design zero trust private application access architectures, including application segmentation, access policies, App Connector placement, private service edge considerations, third-party access, privileged remote access, and migration from legacy VPN approaches. Incorporate data protection capabilities into broader zero trust architectures, including data discovery, classification, cloud DLP, SaaS security, inline inspection, policy design, incident workflows, and control integration. Develop integrated zero trust, secure access, data protection, cloud, branch, workload, identity, endpoint, and digital experience strategies aligned with business objectives and regulatory obligations. Lead enterprise security assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, target operating models, governance frameworks, and transformation programs. Facilitate executive and working-level workshops across security, privacy, legal, compliance, network, infrastructure, cloud, identity, endpoint, application, data governance, security operations, audit, and business stakeholders. Translate requirements into target-state architectures, traffic-flow designs, policy models, integration requirements, migration waves, implementation plans, testing approaches, operational procedures, and measurable outcomes. Establish architecture principles, reference patterns, configuration standards, decision records, integration requirements, and quality criteria for Zscaler-based enterprise solutions. Design and