Lead Data Privacy Engineer — Enterprise PETs & DLP

CVS Health; Madison (WI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health seeks a Lead Data Privacy Engineer to drive enterprise privacy strategy and implement scalable privacy technologies across structured and unstructured data. You will enable secure data use while meeting regulatory requirements and protecting PHI/PII.

Collaborating with Cybersecurity, Legal, Compliance, Product, and Data teams, you’ll translate regulatory demands into scalable architectures, governance controls, and automated protections, strengthening the organization’s privacy

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines.
• 5+ years designing and deploying enterprise-scale data protection capabilities.
• Strong software engineering foundation with 5+ years developing, integrating, and automating solutions using Python, Java, Go.
• 5+ years operating within cloud-native and DevSecOps environments.
• 3+ years leading cross-functional privacy, data protection, cybersecurity initiatives.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering.
• Design, deploy, and optimize PETs and DLP to protect sensitive data.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy-by-design.
• Conduct privacy risk assessments, threat modeling, and control evaluations.
• Drive governance, metrics, automation, and continuous improvement of privacy posture.

Skills

Privacy engineering

Security engineering

Data protection

Python/Java/Go

Cloud-native/DevSecOps

Education

Bachelor’s degree

Tools

Encryption

Tokenization

Anonymization

Pseudonymization

DLP

Data classification

Job description

CVS Health seeks a Lead Data Privacy Engineer to drive enterprise privacy strategy and implement scalable privacy technologies across structured and unstructured data. You will enable secure data use while meeting regulatory requirements and protecting PHI/PII.

Collaborating with Cybersecurity, Legal, Compliance, Product, and Data teams, you’ll translate regulatory demands into scalable architectures, governance controls, and automated protections, strengthening the organization’s privacy