Head of Privacy Engineering

CVS Health; Des Moines (IA); Presencial; USD 107.000 - 284.000; Jornada completa

Descripción de la vacante

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection strategies across structured and unstructured data. You will drive the design and deployment of PETs, encryption, tokenization, and data classification to protect sensitive information while enabling innovative business use of data.

You will partner with Cybersecurity, Engineering, Legal, and Compliance to translate regulatory requirements into scalable architectures and automated

Formación

• 7+ years in Privacy Engineering or related fields with GDPR/CCPA/HIPAA knowledge.
• 5+ years building data protection capabilities at enterprise scale.
• Strong coding skills in Python, Java, or Go and automation experience.
• 5+ years in cloud-native/DevSecOps with IaC and CI/CD.
• 3+ years leading cross-functional privacy, data protection, or security initiatives.

Responsabilidades

• Lead enterprise data protection and privacy engineering across data environments.
• Design PETs (encryption, tokenization, anonymization) and DLP solutions.
• Collaborate with cross‑functional teams to embed privacy-by-design.
• Conduct privacy risk assessments, threat modeling, and control evaluations.
• Drive governance, metrics, and continuous improvement of privacy posture.

Conocimientos

Privacy engineering

Security engineering

Data protection

Cybersecurity

Regulatory compliance

Python/Java/Go

DevSecOps

Educación

Bachelor's degree

Herramientas

AWS

Azure

GCP

Descripción del empleo

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection strategies across structured and unstructured data. You will drive the design and deployment of PETs, encryption, tokenization, and data classification to protect sensitive information while enabling innovative business use of data.

You will partner with Cybersecurity, Engineering, Legal, and Compliance to translate regulatory requirements into scalable architectures and automated