Lead Data Privacy Engineer — Enterprise Privacy & PETs

CVS Health; Nashville (TN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement plan

Job summary

CVS Health seeks a Lead Data Privacy Engineer to drive enterprise privacy engineering and data protection at scale. You will design, implement, and optimize Privacy Enhancing Technologies (PETs) including encryption, tokenization, anonymization, and DLP across both structured and unstructured data, partnering with Cybersecurity, Legal, Product, and Compliance teams.

You will translate evolving regulations into scalable architectures, govern data protection controls, and advance privacy-by-design

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, or related disciplines.
• 5+ years designing and deploying enterprise-scale data protection capabilities (encryption, tokenization, DLP, PETs).
• 5+ years programming with Python, Java, Go or similar.
• 5+ years in cloud-native/DevSecOps environments with CI/CD, IaC, and security automation.
• 3+ years leading cross-functional privacy or data protection initiatives.

Responsibilities

• Lead enterprise data protection and privacy engineering across structured/unstructured data.
• Design and deploy PETs, encryption, tokenization, anonymization, and DLP.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy-by-design.
• Conduct privacy risk assessments, impact assessments, and threat modeling.
• Drive governance metrics, automation, and continuous privacy improvements.

Skills

Privacy engineering

Security engineering

Data protection

Python

Java

Go

Education

Bachelor's degree

Tools

AWS

GCP

Azure

KMS

DLP tools

Job description

CVS Health seeks a Lead Data Privacy Engineer to drive enterprise privacy engineering and data protection at scale. You will design, implement, and optimize Privacy Enhancing Technologies (PETs) including encryption, tokenization, anonymization, and DLP across both structured and unstructured data, partnering with Cybersecurity, Legal, Product, and Compliance teams.

You will translate evolving regulations into scalable architectures, govern data protection controls, and advance privacy-by-design