Lead Data Privacy Engineer
CVS Health4 days ago
Base Salary
$107k - $284k/yr
Responsibilities
- Lead enterprise data protection and privacy engineering strategy, prioritization, implementation, and continuous improvement across structured and unstructured data environments.
- Drive data discovery, inventory, mapping, classification, governance, and protection initiatives for regulated and sensitive data assets.
- Design, deploy, and optimize privacy-enhancing technologies including encryption, tokenization, anonymization, pseudonymization, and Data Loss Prevention solutions.
- Partner with Engineering, Product, Data, Cybersecurity, Legal, and Compliance teams to implement privacy-by-design principles, technical standards, governance controls, and scalable architectures.
- Conduct privacy risk assessments, privacy impact assessments, threat modeling, and control evaluations while supporting audits, investigations, compliance, and regulatory obligations.
- Lead cross-functional initiatives involving privacy metrics, automation, advanced analytics, emerging privacy technologies, and continuous improvement.
Requirements
- 7+ years advancing Privacy Engineering, Security Engineering, Data Protection, Cybersecurity, or related technical disciplines, including controls aligned to GDPR, CCPA/CPRA, HIPAA, and similar frameworks.
- 5+ years designing and deploying enterprise-scale data protection capabilities such as encryption, tokenization, key management, data classification, DLP, privacy-enhancing technologies, and insider risk controls.
- 5+ years developing, integrating, and automating solutions using Python, Java, Go, or similar programming and scripting languages.
- 5+ years working in cloud-native and DevSecOps environments with security automation, Infrastructure as Code, privacy threat modeling, and privacy impact assessments.
- 3+ years leading complex cross-functional privacy, data protection, cybersecurity, or compliance initiatives.
- Bachelor’s degree from an accredited university or equivalent work experience; a high-school diploma plus 4 years of relevant experience is also accepted.
- Preferred certifications include CDPSE, CIPP, CIPT, CIPM, CISSP, or equivalent privacy and security credentials.
- Preferred knowledge includes NIST, ISO 27001, HITRUST, FIPS, PCI DSS, HIPAA, regulatory audits, cloud-native environments, AWS, Azure, GCP, SQL/NoSQL databases, data lakes, and enterprise-scale data platforms.
- Healthcare or other highly regulated industry experience and experience protecting PHI, PII, or other sensitive data are preferred.
Benefits
- Full-time position with medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources based on eligibility.
- Eligible for CVS Health bonus, commission, or short-term incentive programs and an equity award program in addition to base pay.
- Expected application window closing date is 10/31/2026.
About CVS Health
CVS Health is a U.S. health care company that operates thousands of retail pharmacies, runs the CVS Caremark pharmacy benefits manager, and owns the Aetna health insurance business. It sells prescriptions, retail health goods, and insurance plans, and provides primary and urgent care through MinuteClinic and other services for consumers, employers, and government programs. Founded in 1963 and headquartered in Woonsocket, Rhode Island, it is a public company traded on the NYSE.