Lead Data Privacy Engineer — Architect Data Protection at Scale

CVS Health; Lansing (MI); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits package

Equity award program

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will design and implement PETs, encryption, DLP, data classification, and privacy-by-design controls while collaborating with Cybersecurity, Engineering, Legal, and Compliance teams to meet GDPR/CCPA/HIPAA requirements.

You will drive strategy, governance, and scalable architectures, aligning with regulatory obligations and enabling secure,

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines, including architecting and implementing privacy and data protection controls aligned to GDPR, CCPA/CPRA, HIPAA, and similar regulatory frameworks.
• 5+ years designing and deploying enterprise‑scale data protection capabilities, including encryption, tokenization, key management, data classification, DLP, PETs, and insider risk controls.
• Strong software engineering foundation with 5+ years developing, integrating, and automating solutions using Python, Java, Go, or similar programming and scripting languages.
• 5+ years operating within cloud‑native and DevSecOps environments, leveraging CI/CD pipelines, IaC, security automation, privacy threat modeling, and privacy impact assessments to deliver secure, scalable solutions.
• 3+ years leading complex, cross‑functional privacy, data protection, cybersecurity, or compliance initiatives, influencing stakeholders across Engineering, Product, Data, Security, Legal, and Compliance organizations to drive business and regulatory outcomes.

Responsibilities

• Lead the strategy, prioritization, implementation, and continuous improvement of enterprise data protection and privacy engineering capabilities across structured and unstructured data environments.
• Design, deploy, and optimize Privacy Enhancing Technologies (PETs), including encryption, tokenization, anonymization, pseudonymization, data classification, DLP, and other privacy‑preserving solutions.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy‑by‑design principles and translate regulatory requirements into scalable architectures, technical standards, governance controls, and enterprise data protection solutions.
• Conduct privacy risk assessments, privacy impact assessments, threat modeling, and control evaluations to identify, mitigate, and monitor privacy and security risks.
• Drive enterprise data governance, privacy metrics, automation, advanced analytics, emerging privacy technologies, and continuous improvement initiatives by monitoring industry trends and regulatory developments.

Skills

Privacy Engineering

Data Protection

Encryption

Tokenization

DLP

PETs

DevSecOps

Education

Bachelor’s degree

Tools

Python

Java

Go

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will design and implement PETs, encryption, DLP, data classification, and privacy-by-design controls while collaborating with Cybersecurity, Engineering, Legal, and Compliance teams to meet GDPR/CCPA/HIPAA requirements.

You will drive strategy, governance, and scalable architectures, aligning with regulatory obligations and enabling secure,