Lead Data Privacy Engineer - Strategy & Protection

CVS Health; Lansing (MI); On-site; USD 106,605 - 284,280; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Retirement savings options

Wellness programs

Paid time off

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection, embedding privacy-by-design across data environments and supporting regulatory compliance.

You will partner with cybersecurity, engineering, legal and compliance teams to translate requirements into scalable architectures, risk assessments, and governance controls.

This role focuses on PETs, encryption, tokenization, data classification and DLP to protect PHI/PII while enabling secure business innovation.

Qualifications

• 7+ years of experience in privacy/security/data protection.
• 5+ years designing and implementing enterprise data protection capabilities.
• 5+ years coding in Python/Java/Go.
• 5+ years in cloud and DevSecOps with CI/CD, IaC.
• 3+ years leading large privacy initiatives with cross-functional partners.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering.
• Design and deploy PETs, encryption, tokenization, DLP.
• Collaborate with engineering, product, legal, compliance, and security teams.
• Conduct privacy risk assessments and control evaluations.
• Drive governance metrics and emerging technologies to improve privacy posture.

Skills

Privacy engineering

Security engineering

Data protection

Cybersecurity

Regulatory compliance

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Databases (SQL/NoSQL)

Data lakes

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection, embedding privacy-by-design across data environments and supporting regulatory compliance.

You will partner with cybersecurity, engineering, legal and compliance teams to translate requirements into scalable architectures, risk assessments, and governance controls.

This role focuses on PETs, encryption, tokenization, data classification and DLP to protect PHI/PII while enabling secure business innovation.