Data Privacy Engineering Lead - Protect & Enable Innovation

CVS Health; Augusta (ME); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities by designing scalable privacy and security solutions that safeguard sensitive information while enabling business innovation.

This highly visible role partners across cybersecurity, engineering, data, legal, and compliance teams to embed privacy-by-design principles and strengthen regulatory compliance.

Qualifications

• 7+ years in Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related disciplines with GDPR/CCPA/HIPAA experience.
• 5+ years designing enterprise data protection capabilities incl. encryption, tokenization, DLP, or insider risk controls.
• 5+ years programming/scripting in Python, Java, Go, or similar.
• 5+ years cloud and DevSecOps experience with CI/CD, IaC, privacy threat modeling, and security automation.
• 3+ years leading enterprise privacy, data protection, cybersecurity, or compliance initiatives.

Responsibilities

• Lead strategy and continuous improvement of enterprise data protection and privacy across data environments.
• Design and optimize Privacy Enhancing Technologies (PETs) and other privacy-preserving solutions.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy-by-design.
• Conduct privacy risk assessments, privacy impact assessments, threat modeling, and control evaluations.
• Drive governance, privacy metrics, automation, analytics, and cross-functional privacy initiatives.

Skills

Privacy engineering

Security engineering

Data protection

Python

Java

Education

Bachelor's degree

Tools

AWS

Docker

Kubernetes

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities by designing scalable privacy and security solutions that safeguard sensitive information while enabling business innovation.

This highly visible role partners across cybersecurity, engineering, data, legal, and compliance teams to embed privacy-by-design principles and strengthen regulatory compliance.