Lead Data Privacy Engineer — Enterprise PETs & DLP

CVS Health; Boise (ID); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will design and implement privacy‑preserving technologies (PETs) such as encryption, tokenization, anonymization, and DLP while aligning with GDPR, CCPA/CPRA, HIPAA, and related regulations.

Collaborating with Cybersecurity, Engineering, Legal, and Compliance, you will translate regulatory requirements into scalable architectures,

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines, including architecting and implementing privacy and data protection controls aligned to GDPR, CCPA/CPRA, HIPAA, and similar regulatory frameworks.
• 5+ years designing and deploying enterprise-scale data protection capabilities, including encryption, tokenization, key management, data classification, Data Loss Prevention (DLP), privacy-enhancing technologies (PETs), and insider risk controls.
• Strong software engineering foundation with 5+ years developing, integrating, and automating solutions using Python, Java, Go, or similar programming and scripting languages.
• 5+ years operating within cloud-native and DevSecOps environments, leveraging CI/CD pipelines, Infrastructure as Code (IaC), security automation, privacy threat modeling, and privacy impact assessments to deliver secure, scalable solutions.
• 3+ years leading complex, cross-functional privacy, data protection, cybersecurity, or compliance initiatives, influencing stakeholders across Engineering, Product, Data, Security, Legal, and Compliance organizations to drive business and regulatory outcomes.

Responsibilities

• Lead the strategy, prioritization, implementation, and continuous improvement of enterprise data protection and privacy engineering capabilities across structured and unstructured data environments.
• Design, deploy, and optimize Privacy Enhancing Technologies (PETs), including encryption, tokenization, anonymization, pseudonymization, data classification, DLP, and other privacy-preserving solutions.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy-by-design principles and translate regulatory requirements into scalable architectures, technical standards, governance controls, and enterprise data protection solutions.
• Conduct privacy risk assessments, privacy impact assessments, threat modeling, and control evaluations to identify, mitigate, and monitor privacy and security risks while supporting audit, compliance, investigation, and regulatory obligations.
• Drive enterprise data governance, privacy metrics, automation, advanced analytics, emerging privacy technologies, and continuous improvement initiatives by monitoring industry trends and regulatory developments.

Skills

Privacy Engineering

Security Engineering

Data Protection

Python/Java/Go

Privacy-by-design

Data governance

Cloud-native / DevSecOps

Education

Bachelor's degree or equivalent

Tools

AWS

Azure

GCP

SQL/NoSQL databases

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will design and implement privacy‑preserving technologies (PETs) such as encryption, tokenization, anonymization, and DLP while aligning with GDPR, CCPA/CPRA, HIPAA, and related regulations.

Collaborating with Cybersecurity, Engineering, Legal, and Compliance, you will translate regulatory requirements into scalable architectures,