Senior Data Privacy Engineer — Enterprise Privacy & PETs

CVS Health; Concord (NH); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to drive enterprise privacy engineering and data protection strategies across data environments. You will lead PET deployment, data discovery, classification, encryption, and DLP while collaborating with legal, compliance, product, and engineering teams.

The role focuses on privacy-by-design, regulatory alignment (GDPR, HIPAA, CCPA), and scalable architectures to protect PHI and PII while enabling secure data use.

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, or related technical disciplines.
• 5+ years designing and deploying enterprise-scale data protection capabilities.
• Strong software engineering foundation with 5+ years developing, integrating, and automating solutions using Python, Java, Go, or similar languages.
• 5+ years operating within cloud-native and DevSecOps environments with CI/CD, IaC, security automation.
• 3+ years leading complex, cross-functional privacy initiatives across Eng, Product, Data, Security, Legal.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering across structured and unstructured data.
• Design and deploy Privacy Enhancing Technologies (PETs) including encryption, tokenization, and DLP.
• Partner with engineering, product, legal, compliance, and cybersecurity to embed privacy-by-design.
• Conduct privacy risk assessments, threat modeling, and control evaluations for regulatory obligations.
• Drive governance, privacy metrics, automation, and analytics to improve data protection and operational efficiency.

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

CVS Health is seeking a Lead Data Privacy Engineer to drive enterprise privacy engineering and data protection strategies across data environments. You will lead PET deployment, data discovery, classification, encryption, and DLP while collaborating with legal, compliance, product, and engineering teams.

The role focuses on privacy-by-design, regulatory alignment (GDPR, HIPAA, CCPA), and scalable architectures to protect PHI and PII while enabling secure data use.