Senior Data Privacy Engineer - Enterprise Protection Leader

CVS Health Corporation; Dover (DE); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will drive strategy, design, and implementation of PETs and DLP while collaborating with Legal, Compliance, Engineering, and Product teams.

The role emphasizes translating regulatory requirements into scalable architectures, governance controls, and automated privacy solutions, supporting audit and regulatory obligations.

Qualifications

• 7+ years in privacy/security/data protection roles, aligning controls to GDPR/CCPA/HIPAA.
• 5+ years designing/deploying enterprise data protection (encryption, tokenization, DLP, PETs).
• 5+ years software engineering; develop/integrate/automate in Python/Java/Go.
• 5+ years in cloud-native/DevSecOps with CI/CD and IaC.
• 3+ years leading cross-functional privacy/data protection initiatives.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering across data environments.
• Design and deploy PETs: encryption, tokenization, anonymization, DLP, and related privacy tools.
• Partner with cross-functional teams to embed privacy-by-design and translate requirements.
• Conduct privacy risk assessments, PIAs, threat modeling, and control evaluations.
• Drive governance metrics, automation, analytics, and continuous privacy improvements.

Skills

Privacy engineering

Security engineering

Data protection

Cybersecurity

Software engineering

Education

Bachelor's degree in a relevant field

Tools

PETs

DLP

Key management

CI/CD

IaC

Job description

CVS Health Corporation is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will drive strategy, design, and implementation of PETs and DLP while collaborating with Legal, Compliance, Engineering, and Product teams.

The role emphasizes translating regulatory requirements into scalable architectures, governance controls, and automated privacy solutions, supporting audit and regulatory obligations.