Lead Data Privacy Engineer, Enterprise Data Protection

CVS Health; Bismarck (ND); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities and design scalable privacy and security solutions that safeguard sensitive information while enabling business innovation.

This highly visible role partners across cybersecurity, engineering, data, legal, and compliance teams to embed privacy-by-design principles, strengthen regulatory compliance, and drive enterprise data protection strategy.

Qualifications

• 7+ years of experience in Privacy Engineering, Security Engineering, Data Protection, or related fields.
• 5+ years designing and implementing enterprise data protection capabilities (encryption, tokenization, classification, DLP).
• 5+ years of hands-on programming in Python, Java, Go, or similar.
• 5+ years in cloud and DevSecOps environments with CI/CD, IaC, and security automation.
• 3+ years leading enterprise privacy and compliance initiatives with cross-functional teams.

Responsibilities

• Lead enterprise data protection and privacy engineering strategy across data environments.
• Design and deploy Privacy Enhancing Technologies (PETs) including encryption, tokenization, anonymization, and data classification.
• Partner with engineering, product, legal, compliance, and cybersecurity to embed privacy-by-design principles.
• Conduct privacy risk assessments, threat modeling, and control evaluations for audit and regulatory obligations.
• Drive governance metrics, data protection maturity, and adoption of new privacy technologies.

Skills

Privacy engineering

Security engineering

Data protection

Cybersecurity

Programming (Python/Java/Go)

Cloud & DevSecOps

Regulatory compliance

Education

Bachelor's degree

Tools

AWS

Azure

GCP

SQL/NoSQL databases

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities and design scalable privacy and security solutions that safeguard sensitive information while enabling business innovation.

This highly visible role partners across cybersecurity, engineering, data, legal, and compliance teams to embed privacy-by-design principles, strengthen regulatory compliance, and drive enterprise data protection strategy.