Privacy Engineer

Jobtailor; McKinney (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor in McKinney, TX is looking for a privacy professional to lead initial and ongoing information privacy risk assessments, ensure compliant policies, and drive remediation with cross-functional teams.

The role requires knowledge of CCPA, GDPR, HIPAA, PbD and DPIAs, with experience in regulatory audits and privacy program assurance. You’ll communicate findings clearly and partner with stakeholders to optimize privacy controls and awareness across the organization.

Qualifications

• Bachelor's degree or 5 years of equivalent experience in IT/privacy.
• Familiar with privacy legislation and major frameworks (CCPA, GDPR, HIPAA).
• Knowledge of PbD, PIAs, and/or DPIAs.

Responsibilities

• Lead privacy risk assessments and remediation activities.
• Monitor ongoing privacy compliance across functions.
• Maintain up-to-date privacy consents and notices.
• Provide guidance on privacy controls to internal partners.
• Conduct data privacy impact assessments and audits.
• Stay current with privacy laws and accreditation standards.

Skills

Privacy risk assessment

Compliance monitoring

Data protection knowledge

Problem solving

Time management

Interpersonal communication

Independent work

Education

Bachelor's degree in Information Technology / Information Systems / Information Assurance

Tools

GRC Archer

Cookie Consent Platforms

Microsoft Office

IT solution architecture

Job description

• Ensure privacy forms, policies, standards, and procedures are up-to-date, accurate, and within risk tolerance levels.
• Perform initial and periodic information privacy risk assessment/analysis, mitigation, and remediation.
• Conduct ongoing privacy compliance monitoring activities in coordination with the organization's other compliance and operational assessment functions.
• Ensure the organization maintains appropriate privacy and confidentiality consents, authorization forms, information notices, and other materials reflecting current organizational and legal practices and requirements.
• Work cross-functionally with other departments to provide guidance on the effectiveness of privacy controls.
• Support privacy outreach and awareness-building.
• Provide guidance to internal business partners regarding compliance with privacy regulations (SME).
• Coordinate and collaborate with regulatory and compliance functions.
• Conduct data privacy impact assessments.
• Conduct Consent Management audits.
• Perform and provide recommendations on privacy processes around Privacy Incident Investigations and Response, Privacy Program Assurance and Audits, Privacy Impact and Risk Assessments, and Stakeholder Communication and Management under the guidance of the Privacy Architecture Manager.
• Research and stay current with privacy-related news and changes to policies.
• Stay informed on applicable privacy laws and accreditation standards.
• Research applicable laws, regulations, and standards that Globe Life must comply with.
• Communicate effectively and proactively with ideas and recommendations for optimizing business operations, resources, and capacity to meet internal and external compliance goals.
• Performs other duties as assigned. Some travel may be required.

Requirements

• Bachelor's degree in Information Technology, Information Systems, or Information Assurance, or 5 years of equivalent experience preferred.
• 1 to 2 years in Software Development, Information Security, Privacy, and/or a GRC-related role.
• Familiar with relevant privacy legislation, standards, and major compliance frameworks including CCPA, PIPEDA, GDPR, HIPAA, and the New Zealand Privacy Act.
• Knowledge of Privacy by Design (PbD) principles, with exposure to implementing PbD, Privacy Impact Assessments (PIAs), and/or Data Protection Impact Assessments (DPIAs).
• Experience in an operational risk program role, working with cross-functional teams, and conducting major compliance audits preferred.
• CIPP/US or CIPP/C certification from IAPP required; CIPP/T, CISSP, CISM, or cloud privacy/security certifications (e.g., AWS, Azure, GCP) preferred.
• High technical aptitude with strong knowledge of Cookie Consent Management Platforms, GRC tool Archer, IT solution architecture, and Microsoft Office Suite.
• Strong problem-solving skills with the ability to use a combination of analysis, experience, and judgment to develop feasible solutions.
• Excellent time management, task planning, and prioritization skills.
• Excellent verbal, written, and interpersonal communication skills with both technical and non-technical audiences.
• Ability to work independently and under pressure with a high level of integrity and trust.

Core Competencies

Demonstrates expertise in privacy compliance, risk assessment, and data protection, with a strong understanding of relevant privacy laws and frameworks. Capable of conducting privacy audits, assessments, and providing strategic guidance to ensure organizational compliance and effective privacy controls.

Highest-signal resume keywords

• CIPP/US Certification
• Privacy Impact Assessments (PIAs)
• Cookie Consent Management Platforms
• GRC Tool Archer
• Privacy by Design (PbD) Principles

ATS Optimization Keywords

Hard Skills

• Information Privacy Risk Assessment
• Privacy Compliance Monitoring
• Privacy Incident Investigations
• Operational Risk Program
• Data Protection Impact Assessments (DPIAs)
• Privacy Program Assurance
• Privacy Standards and Policies
• Compliance Audits
• Privacy Outreach and Awareness
• Regulatory Compliance

Soft Skills

• Problem-Solving Skills
• Time Management
• Task Planning
• Interpersonal Communication
• Ability to Work Independently

Certifications & Qualifications

• CIPP/US
• CIPP/C
• CIPP/T
• CISSP
• CISM

Industry Keywords

• CCPA
• PIPEDA
• GDPR
• HIPAA
• New Zealand Privacy Act

Tools & Technologies

• Microsoft Office Suite
• GRC Tool Archer
• Cookie Consent Management Platforms
• IT Solution Architecture