Lead Data Privacy Engineer — Privacy by Design Leader

CVS Health; Frankfort (KY); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities across structured and unstructured data. You will design scalable privacy solutions and collaborate with cybersecurity, engineering, legal, and compliance teams to embed privacy-by-design principles.

You will lead privacy risk assessments, threat modeling, and governance initiatives, helping safeguard sensitive data while enabling business innovation across the enterprise.

Qualifications

• 7+ years in Privacy/Security or related disciplines with GDPR/CCPA/HIPAA experience.
• 5+ years building enterprise privacy/data protection capabilities (encryption, DLP, data classification).
• 5+ years coding in Python/Java/Go or similar.
• 5+ years in cloud/DevSecOps with IaC, CI/CD, privacy threat modeling.
• 3+ years leading cross-functional privacy/data protection initiatives.

Responsibilities

• Lead strategy and rollout of enterprise data protection and privacy engineering.
• Design and deploy PETs: encryption, tokenization, anonymization, DLP.
• Collaborate with engineering, legal, compliance to embed privacy-by-design.
• Conduct privacy risk assessments and support audits and regulatory obligations.
• Drive governance metrics, emerging tech, and cross-functional privacy initiatives.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cloud & DevSecOps

Programming (Python/Java/Go)

Education

Bachelor’s degree

Equivalent work experience

Tools

Encryption

DLP

Key Management

AWS

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities across structured and unstructured data. You will design scalable privacy solutions and collaborate with cybersecurity, engineering, legal, and compliance teams to embed privacy-by-design principles.

You will lead privacy risk assessments, threat modeling, and governance initiatives, helping safeguard sensitive data while enabling business innovation across the enterprise.