Senior Privacy by Design Engineer & Security Lead

MED Medtronic Inc; Fridley (MN); On-site; USD 161,000 - 241,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) plan with employer match

Tuition assistance

Job summary

Medtronic is seeking a Principal Security & Privacy Engineer to own and advance Privacy by Design across a broad portfolio of connected medical devices and software. You will partner with product security, engineering, and regulatory teams to embed privacy throughout the product lifecycle.

The role requires strong knowledge of HIPAA, GDPR, and global privacy laws, with a track record of leading DPIAs, incident response, and privacy risk management in healthcare or highly regulated environments.

Qualifications

• Bachelor’s degree with 7 years’ relevant experience, or higher degrees with fewer years.
• Extensive experience with Privacy by Design and lifecycle integration across products.

Responsibilities

• Own and mature the Privacy by Design framework across product development and lifecycle.
• Lead cross-functional teams in privacy risk identification and controls.
• Conduct Data Protection Impact Assessments and drive mitigation planning.
• Develop privacy docs, data maps, and regulatory submissions.
• Lead privacy investigations and remediation activities.
• Align privacy with threat assessments and security risk management.
• Provide privacy consultation to engineering, legal, regulatory, and business stakeholders.
• Mentor privacy and security professionals and advance awareness and training.

Skills

Privacy by Design

Cross-functional leadership

Data privacy assessments

Regulatory & compliance

Education

Bachelor’s degree with 7+ years

Master’s degree with 5+ years

PhD with 3+ years

Tools

HIPAA compliance knowledge

GDPR knowledge

Job description

Medtronic is seeking a Principal Security & Privacy Engineer to own and advance Privacy by Design across a broad portfolio of connected medical devices and software. You will partner with product security, engineering, and regulatory teams to embed privacy throughout the product lifecycle.

The role requires strong knowledge of HIPAA, GDPR, and global privacy laws, with a track record of leading DPIAs, incident response, and privacy risk management in healthcare or highly regulated environments.