Senior Data Privacy Engineer & Privacy-Tech Leader

CVS Health; Montpelier (VT); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to drive enterprise privacy strategy and data protection across structured and unstructured data. You will design and deploy Privacy Enhancing Technologies, lead risk assessments, and partner with legal, compliance, and engineering teams to embed privacy-by-design practices.

You will shape governance controls and automate privacy solutions at scale, balancing strong regulatory requirements with innovation to protect PHI and PII for millions of

Qualifications

• 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines with GDPR/CCPA/HIPAA experience.
• 5+ years designing and deploying enterprise-scale data protection capabilities (encryption, tokenization, DLP, PETs).
• 5+ years software engineering with Python/Java/Go or similar.
• 5+ years operating in cloud-native and DevSecOps environments with IaC and security automation.
• 3+ years leading cross-functional privacy/data protection initiatives.

Responsibilities

• Lead strategy and implementation of enterprise data protection and privacy engineering across data environments.
• Design and deploy PETs (encryption, tokenization, anonymization, DLP) protecting sensitive data.
• Partner with engineering, product, legal, compliance, and cybersecurity to embed privacy-by-design principles.
• Conduct privacy risk assessments, PIA, threat modeling, and control evaluations.
• Drive governance, privacy metrics, automation, and advanced analytics to strengthen privacy posture.

Skills

Privacy engineering

Data protection

Python/Java/Go

Cloud/DevSecOps

Stakeholder leadership

Education

Bachelor’s degree

Job description

CVS Health is seeking a Lead Data Privacy Engineer to drive enterprise privacy strategy and data protection across structured and unstructured data. You will design and deploy Privacy Enhancing Technologies, lead risk assessments, and partner with legal, compliance, and engineering teams to embed privacy-by-design practices.

You will shape governance controls and automate privacy solutions at scale, balancing strong regulatory requirements with innovation to protect PHI and PII for millions of