Lead Data Privacy Engineer — Protect & Empower Data

CVS Health; Richmond (VA); On-site; USD 106,605 - 284,280; Full time

Benefits offered by this job

Medical, dental, vision benefits

Paid time off

Retirement options

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection across structured and unstructured data, protecting patient and customer information while enabling business innovation.

This role partners with cybersecurity, engineering, data, legal and compliance teams to embed privacy-by-design, lead risk assessments, and drive governance and automation to strengthen the privacy posture across the enterprise.

Qualifications

• 7+ years of experience in Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines, including implementation of privacy and data protection requirements associated with GDPR, CCPA/CPRA, HIPAA, or similar regulatory frameworks.
• 5+ years of experience designing and implementing enterprise data protection capabilities, including encryption, tokenization, key management, data classification, Data Loss Prevention (DLP), or insider risk controls.
• 5+ years of hands-on experience developing solutions using one or more programming or scripting languages such as Python, Java, Go, or similar.
• 5+ years of experience working in cloud and DevSecOps environments, including CI/CD pipelines, Infrastructure as Code (IaC), privacy threat modeling, privacy impact assessments, and security automation.
• 3+ years of experience leading enterprise-scale privacy, data protection, cybersecurity, or compliance initiatives while partnering with cross-functional stakeholders across engineering, product, legal, compliance, and security teams.

Responsibilities

• Lead the strategy, prioritization, implementation, and continuous improvement of enterprise data protection and privacy engineering across data environments.
• Design, deploy, and optimize Privacy Enhancing Technologies (PETs) such as encryption, tokenization, anonymization, and data classification to protect data while enabling innovation.
• Partner with engineering, product, legal, compliance, and cybersecurity to embed privacy-by-design and translate regulatory requirements into scalable architectures and governance controls.
• Conduct privacy risk assessments, privacy impact assessments, threat modeling, and control evaluations to identify and mitigate risks and support audits and regulatory obligations.
• Drive governance, privacy metrics, automation, and analytics by monitoring trends and leading cross-functional teams to strengthen privacy posture and operational efficiency.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cybersecurity

Regulatory compliance

Education

Bachelor's degree

Tools

Python

Java

Go

AWS

Azure

GCP

SQL/NoSQL databases

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection across structured and unstructured data, protecting patient and customer information while enabling business innovation.

This role partners with cybersecurity, engineering, data, legal and compliance teams to embed privacy-by-design, lead risk assessments, and drive governance and automation to strengthen the privacy posture across the enterprise.