Lead Data Privacy Engineer — Strategy & PETs

CVS Health; Jackson (MS); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus eligibility

Equity program

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to shape and execute enterprise privacy strategy. You will drive data protection across structured and unstructured data, deploying PETs, encryption, tokenization, and DLP while aligning with GDPR, HIPAA, and other regulations.

You’ll partner with Cybersecurity, Legal, Product, and Compliance to scale privacy by design. You will lead data governance, risk assessments, and automation initiatives to protect PHI and PII, balancing security with

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines.
• 5+ years designing and deploying enterprise‑scale data protection capabilities.
• Strong software engineering foundation with 5+ years developing, integrating, and automating solutions using Python, Java, Go.
• 5+ years operating within cloud‑native and DevSecOps environments.
• 3+ years leading complex cross‑functional privacy initiatives.

Responsibilities

• Lead the strategy, prioritization, implementation, and continuous improvement of enterprise data protection and privacy engineering capabilities.
• Design, deploy, and optimize Privacy Enhancing Technologies (PETs) and DLP solutions.
• Partner with engineering, product, legal, compliance, and cybersecurity teams to embed privacy‑by‑design.
• Conduct privacy risk assessments, threat modeling, and control evaluations.
• Drive governance, privacy metrics, automation, and analytics to strengthen privacy posture.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cloud/DevSecOps

Threat Modeling

Education

Bachelor's degree or equivalent

Tools

Python

Java

Go

Encryption

Tokenization

DLP

Job description

CVS Health is seeking a Lead Data Privacy Engineer to shape and execute enterprise privacy strategy. You will drive data protection across structured and unstructured data, deploying PETs, encryption, tokenization, and DLP while aligning with GDPR, HIPAA, and other regulations.

You’ll partner with Cybersecurity, Legal, Product, and Compliance to scale privacy by design. You will lead data governance, risk assessments, and automation initiatives to protect PHI and PII, balancing security with