Lead Data Privacy Engineer: Shape Privacy at Scale

CVS Health; Nashville (TN); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health in Nashville seeks a Lead Data Privacy Engineer to advance enterprise data protection capabilities, embedding privacy‑by‑design across structured and unstructured data, and to enable responsible, secure use of information.

You will partner with engineering, product, legal, compliance and cybersecurity teams to implement PETs like encryption and tokenization, conduct privacy risk assessments, and drive governance, metrics and continuous improvement across the organization.

Qualifications

• 7+ years in Privacy Engineering, Security Engineering or related roles with regulatory experience.
• 5+ years designing enterprise data protection capabilities (encryption, tokenization, DLP, classification).
• 5+ years hands-on development in Python, Java, Go or similar.
• 5+ years cloud/DevSecOps with CI/CD, IaC and privacy automation.
• 3+ years leading cross-functional privacy, data protection initiatives.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering.
• Design, deploy and optimize PETs like encryption, tokenization, anonymization and DLP.
• Partner with engineering, product, legal, compliance and security to embed privacy by design.
• Conduct privacy risk assessments, privacy impact assessments and threat modeling.
• Drive governance, privacy metrics, automation and continuous improvement.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cybersecurity

Programming (Python/Java/Go)

Cloud & DevSecOps

Stakeholder collaboration

Education

Bachelor's degree

Tools

AWS

Azure

GCP

SQL/NoSQL databases

Data lakes

Data platforms

Job description

CVS Health in Nashville seeks a Lead Data Privacy Engineer to advance enterprise data protection capabilities, embedding privacy‑by‑design across structured and unstructured data, and to enable responsible, secure use of information.

You will partner with engineering, product, legal, compliance and cybersecurity teams to implement PETs like encryption and tokenization, conduct privacy risk assessments, and drive governance, metrics and continuous improvement across the organization.