Senior Privacy Engineer - Enterprise Data Protection

CVS Health; Salem (OR); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will drive PETs like encryption, tokenization, and DLP, shaping privacy strategy with cross-functional teams.

Join a large healthcare organization and influence governance, risk assessments, and privacy-by-design while ensuring regulatory compliance and secure data use.

Qualifications

• 7+ years in privacy engineering or related fields with GDPR/CCPA/HIPAA experience.
• 5+ years building enterprise data protection like encryption, DLP, PETs.
• Strong software engineering with Python/Java/Go.
• Experience in cloud-native and DevSecOps with IaC and CI/CD.
• Leadership of cross-functional privacy, data protection, or compliance initiatives.

Responsibilities

• Lead enterprise data protection and privacy engineering strategies across data environments.
• Design and deploy PETs, encryption, tokenization, anonymization, and DLP.
• Partner with cross-functional teams to embed privacy-by-design.
• Conduct privacy risk assessments, PIA, threat modeling, and control evaluations.
• Drive governance, metrics, analytics, and continuous privacy improvements.

Skills

Privacy Engineering

Security Engineering

Data Protection

Regulatory compliance

Python/Java/Go

Education

Bachelor’s degree or equivalent work experience

Tools

Encryption

Tokenization

DLP

PETs

Data classification

Job description

CVS Health is seeking a Lead Data Privacy Engineer to advance enterprise privacy engineering and data protection across structured and unstructured data. You will drive PETs like encryption, tokenization, and DLP, shaping privacy strategy with cross-functional teams.

Join a large healthcare organization and influence governance, risk assessments, and privacy-by-design while ensuring regulatory compliance and secure data use.