Senior Data Privacy Engineer — Enterprise Privacy Lead

CVS Health; Raleigh (NC); On-site; USD 106,605 - 284,280; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy and data protection capabilities. You will design scalable privacy solutions, embed privacy-by-design, and partner with cross‑functional teams to balance regulatory compliance with business innovation.

The role focuses on data governance, risk assessments, PETs, and modernization of privacy technologies across structured and unstructured data environments, with a strong emphasis on protecting PHI and PII.

Qualifications

• 7+ years in Privacy Eng, Security Eng, Data Protection, Cybersecurity, or related fields with GDPR/CCPA/HIPAA.
• 5+ years designing and implementing enterprise data protection (encryption, tokenization, DLP, data classification).
• 5+ years hands-on coding in Python/Java/Go or similar.
• 5+ years cloud and DevSecOps with CI/CD, IaC, privacy threat modeling, and security automation.
• 3+ years leading enterprise privacy/data protection initiatives with cross-functional partners.

Responsibilities

• Lead strategy and continuous improvement of enterprise data protection and privacy engineering across data environments.
• Design and optimize Privacy Enhancing Technologies (PETs) to protect data while enabling business innovation.
• Partner with engineering, product, legal, compliance, and security teams to embed privacy-by-design.
• Conduct privacy risk assessments, impact assessments, threat modeling, and control evaluations.
• Drive governance metrics, automation, and cross-functional initiatives to strengthen privacy posture.

Skills

Privacy Engineering

Security Engineering

Data Protection

Regulatory Compliance

Cybersecurity

Education

Bachelor's degree or equivalent

Tools

Python

Java

Go

AWS

Azure

GCP

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy and data protection capabilities. You will design scalable privacy solutions, embed privacy-by-design, and partner with cross‑functional teams to balance regulatory compliance with business innovation.

The role focuses on data governance, risk assessments, PETs, and modernization of privacy technologies across structured and unstructured data environments, with a strong emphasis on protecting PHI and PII.