Senior Data Privacy Engineer: Enterprise Protection Leader

CVS Health; Jackson (MS); On-site; USD 106,605 - 284,280; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Equity awards

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities and embed privacy‑by‑design across the organization. You will design scalable privacy and security solutions while enabling business innovation and ensuring regulatory compliance.

This role partners with cybersecurity, engineering, data, legal, and compliance teams to protect sensitive data and support audit and regulatory obligations.

Qualifications

• 7+ years of privacy engineering, security, or data protection experience.
• 5+ years in enterprise data protection capabilities.
• 5+ years in cloud/DevSecOps environments.
• 3+ years leading enterprise privacy initiatives with cross‑functional partners.

Responsibilities

• Lead enterprise data protection and privacy engineering strategy and execution.
• Design and deploy PETs (encryption, tokenization, anonymization, DLP) to protect data.
• Collaborate with engineering, product, legal, compliance and security teams to implement privacy‑by‑design.
• Conduct privacy risk assessments, threat modeling, and control evaluations.
• Drive governance metrics, automation, and data protection improvements across the organization.

Skills

Privacy engineering

Security engineering

Data protection

Cybersecurity

Regulatory knowledge

Programming languages

Cloud & DevSecOps

Cross-functional leadership

Privacy by design

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise data protection capabilities and embed privacy‑by‑design across the organization. You will design scalable privacy and security solutions while enabling business innovation and ensuring regulatory compliance.

This role partners with cybersecurity, engineering, data, legal, and compliance teams to protect sensitive data and support audit and regulatory obligations.