Principal Security & Privacy Engineer

MED Medtronic Inc; Fridley (MN); On-site; USD 161,000 - 241,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) plan with employer match

Tuition assistance

Job summary

Medtronic is seeking a Principal Security & Privacy Engineer to own and advance Privacy by Design across a broad portfolio of connected medical devices and software. You will partner with product security, engineering, and regulatory teams to embed privacy throughout the product lifecycle.

The role requires strong knowledge of HIPAA, GDPR, and global privacy laws, with a track record of leading DPIAs, incident response, and privacy risk management in healthcare or highly regulated environments.

Qualifications

• Bachelor’s degree with 7 years’ relevant experience, or higher degrees with fewer years.
• Extensive experience with Privacy by Design and lifecycle integration across products.

Responsibilities

• Own and mature the Privacy by Design framework across product development and lifecycle.
• Lead cross-functional teams in privacy risk identification and controls.
• Conduct Data Protection Impact Assessments and drive mitigation planning.
• Develop privacy docs, data maps, and regulatory submissions.
• Lead privacy investigations and remediation activities.
• Align privacy with threat assessments and security risk management.
• Provide privacy consultation to engineering, legal, regulatory, and business stakeholders.
• Mentor privacy and security professionals and advance awareness and training.

Skills

Privacy by Design

Cross-functional leadership

Data privacy assessments

Regulatory & compliance

Education

Bachelor’s degree with 7+ years

Master’s degree with 5+ years

PhD with 3+ years

Tools

HIPAA compliance knowledge

GDPR knowledge

Job description

Primary Responsibilities

• Own and continuously mature the Privacy by Design framework, integrating privacy requirements into product development processes, governance activities, and lifecycle management practices.
• Lead cross-functional teams through Privacy by Design activities, identifying privacy risks and defining appropriate technical and procedural controls for products, systems, and third‑party integrations.
• Conduct data privacy assessments, including Data Protection Impact Assessments (DPIAs), and drive mitigation planning and implementation.
• Develop and maintain privacy documentation, data maps, compliance evidence, policies, procedures, and regulatory submission deliverables.
• Lead privacy investigations and corrective actions, coordinating remediation activities and supporting privacy incident response processes.
• Partner with product security engineering teams to align privacy requirements with threat assessments, security risk management activities, and product assurance objectives.
• Provide privacy consultation and subject matter expertise to engineering, legal, regulatory, and business stakeholders on product‑specific privacy matters.
• Mentor privacy and security professionals and contribute to privacy awareness, training, metrics, and continuous improvement initiatives.

Required Qualifications

• Bachelor’s degree with 7 years of relevant experience OR a Master’s degree with 5 years of relevant experience OR a PhD with 3 years of relevant experience
• Extensive experience with Privacy by Design principles and integrating privacy into product development lifecycles.

Preferred Qualifications

• Privacy and security incident management experience
• Cybersecurity / Information Security and/or IT background, including understanding of data protection practices, risk management processes, cybersecurity principles, and incident response methodologies.
• Expertise in global privacy laws including HIPAA and GDPR.
• Experience in the healthcare industry or another heavily regulated industry.
• CIPP, CHPC, or similar certification, or proven experience and/or formal education in data privacy and compliance.
• Understanding of medical device regulations and standards (e.g., FDA pre‑and post‑market guidance on cybersecurity for medical device manufacturers, ISO 13485, ISO 81001‑5‑1).
• For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8C.F.R. §214.2(h)(4)(iii)(A) is required.

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position. The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co‑workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role.

U.S. Work Authorization & Sponsorship

At Medtronic, we are committed to fostering an environment where employees can thrive and make a meaningful impact. In alignment with our enterprise‑wide workforce planning approach, U.S. work authorization sponsorship (H‑1B, TN, J, etc.) is offered exclusively for Principal‑level roles and above, where specialized expertise aligns with long‑term business needs. Roles below the Principal level require candidates to possess unrestricted U.S. work authorization at the time of hire and for the duration of employment.

Benefits & Compensation

Medtronic offers a competitive Salary and flexible Benefits Package A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.

Salary ranges for U.S (excl. PR) locations (USD):$160,800.00 - $241,200.00

This position is eligible for a short‑term incentive called the Medtronic Incentive Plan (MIP). The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others).

• Health, Dental and vision insurance, Health Savings Account, Healthcare Flexible Spending Account, Life insurance, Long‑term disability leave, Dependent daycare spending account, Tuition assistance/reimbursement, and Simple Steps (global well‑being program).
• Incentive plans, 401(k) plan plus employer contribution and match, Short‑term disability, Paid time off, Paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, Non‑qualified Retirement Plan Supplement (subject to IRS earning minimums), and Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums).

Regular employees are those who are not temporary, such as interns. Temporary employees are eligible for paid sick time, as required under applicable state law, and the Employee Stock Purchase Plan. Please note some of the above benefits may not apply to workers in Puerto Rico. Further details are available at the link below: Medtronic benefits and compensation plans

Equal Employment Opportunity

It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.

Company Culture and Mission

We anticipate the application window for this opening will close on - 17 Sep 2026 Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact. A Day in the Life The Neuromodulation and Pelvic Health Research & Development (R&D) organizations develop and support medical device technologies that address chronic pain, movement disorders, overactive bladder, non‑obstructive urinary retention, and other conditions requiring advanced therapeutic solutions. These teams partner across engineering, security, regulatory, quality, and legal functions to deliver products that meet patient, customer, and global regulatory requirements while protecting sensitive health and personal data. As the Principal Security & Privacy Engineer, you will serve as the technical leader responsible for advancing Privacy by Design practices across a portfolio of connected medical devices and supporting technology systems. This role provides hands‑on leadership for privacy risk management, regulatory compliance activities, privacy assessments, incident response, and cross‑functional collaboration to ensure privacy requirements are embedded throughout the product lifecycle.

We lead global healthcare technology and boldly attack the most challenging health problems facing humanity by searching out and finding solutions. Our Mission — to alleviate pain, restore health, and extend life — unites a global team of 95,000+ passionate people. We are engineers at heart— putting ambitious ideas to work to generate real solutions for real people. From the R&D lab, to the factory floor, to the conference room, every one of us experiments, creates, builds, improves and solves. We have the talent, diverse perspectives, and guts to engineer the extraordinary. We change lives. Each team member, each day, helps to improve and redefine how the world treats the most pressing health conditions, from heart disease to diabetes. Our industry leadership comes from the passion and ingenuity of our people. That’s who we are. Working alongside one another, we use science, medicine, and a profound understanding of the human body to build extraordinary technologies that can transform lives. We build extraordinary solutions as one team. With one Medtronic Mindset defining how we work. Speed and decisiveness run through our DNA. Diverse perspectives inspire our bold answers to any challenge that comes our way. And we deliver results the right way, breakthrough after patient breakthrough. This life‑changing career is yours to engineer. By bringing your ambitious ideas, unique perspective and contributions, you will… Build a better future, amplifying your impact on the causes that matter to you and the world Grow a career reflective of your passion and abilities Connect to a dynamic and inclusive culture that welcomes the challenge of life‑long learning These commitments set our team apart from the rest: Experiences that put people first. Respect for people is the hallmark of our humanity. It fuels our team to positively impact even a single life. And it means we put our people first at Medtronic as well, creating a culture of belonging and always pushing to get you the career‑building resources you need. Life‑transforming technologies. No matter your role, you contribute to technologies that transform lives. What we build empowers patients to live life on their terms. Better outcomes for our world. Here, it’s about more than the bottom line. Our Mission to improve human welfare drives us. We advance healthcare, society, and equity with every design, inside and outside our walls. Insight-driven care. Fresh viewpoints. Cutting‑edge AI, data, and automation. You’re shaping the future of healthcare technology and defining the next generation of breakthroughs in care It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities. For sales reps and other patient facing field employees, going into a healthcare settingis considered an essential function of the job and we expect our employees to comply with all credentialing requirements at the hospitals or clinics they support. This employer participates in the federal E‑Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E‑Verify program, please click here.