Lead Data Privacy Engineer - Privacy by Design Leader

CVS Health; Des Moines (IA); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection and privacy engineering capabilities. You will design scalable privacy solutions that protect sensitive information while enabling business innovation.

This role partners with cybersecurity, engineering, legal, and compliance to embed privacy-by-design, strengthen regulatory compliance, and drive enterprise data protection strategy across the organization.

Qualifications

• 7+ years in privacy engineering, security engineering, data protection, cybersecurity, or related fields.
• 5+ years designing and implementing enterprise data protection capabilities (encryption, tokenization, DLP, etc.).
• 5+ years hands-on programming in Python, Java, Go, or similar.
• 5+ years cloud and DevSecOps experience with CI/CD, IaC, and security automation.
• 3+ years leading enterprise-scale privacy initiatives with cross-functional stakeholders.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering across data environments.
• Design and deploy PETs (encryption, tokenization, anonymization, DLP) to protect data while enabling business.
• Collaborate with engineering, product, legal, compliance, and security teams to embed privacy-by-design.
• Conduct privacy risk assessments, threat modeling, and control evaluations for audits and regulatory obligations.
• Drive governance metrics, automation, and continuous improvement of privacy posture and efficiency.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cybersecurity

Cloud/DevSecOps

Education

Bachelor's degree

Tools

Python

Java

Go

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection and privacy engineering capabilities. You will design scalable privacy solutions that protect sensitive information while enabling business innovation.

This role partners with cybersecurity, engineering, legal, and compliance to embed privacy-by-design, strengthen regulatory compliance, and drive enterprise data protection strategy across the organization.