Senior Privacy Engineer: Data Protection & PETs Leader

CVS Health; Richmond (VA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Competitive benefits

Health insurance

Career growth opportunities

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection. You will lead the strategy and implementation of PETs, encryption, tokenization, and anonymization across data environments, ensuring compliant and secure data use.

Collaborating with Cybersecurity, Engineering, Legal, and Compliance, you will translate regulatory requirements into scalable architectures and governance controls, shaping privacy strategy at a national scale.

Qualifications

• 7+ years in Privacy/ Security engineering roles aligned to GDPR/CCPA/HIPAA.
• 5+ years building enterprise data protection capabilities (encryption, DLP, PETs).
• 5+ years software development with Python/Java/Go.
• 5+ years cloud-native/DevSecOps with IaC and CI/CD.
• 3+ years leading cross-functional privacy initiatives.

Responsibilities

• Lead enterprise data protection and privacy engineering strategies across structured and unstructured data environments.
• Design and deploy Privacy Enhancing Technologies (PETs) like encryption and tokenization.
• Partner with cross-functional teams to embed privacy-by-design principles.
• Conduct privacy risk assessments, threat modeling, and control evaluations.
• Drive governance metrics and automation to improve privacy posture.

Skills

Privacy Engineering

Security Engineering

Data Protection

Cybersecurity

Python/Java/Go

Cloud & DevSecOps

Stakeholder Leadership

Education

Bachelor's degree

Tools

AWS

Azure

GCP

DLP tools

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection. You will lead the strategy and implementation of PETs, encryption, tokenization, and anonymization across data environments, ensuring compliant and secure data use.

Collaborating with Cybersecurity, Engineering, Legal, and Compliance, you will translate regulatory requirements into scalable architectures and governance controls, shaping privacy strategy at a national scale.