Privacy Engineer - onsite Frisco, TX
Welltower, Inc.3 days ago
Frisco, TX, USAMid Level
Responsibilities
- Integrate privacy impact assessments and privacy threat modeling into security intake processes for vendors, facilities, systems, and initiatives.
- Assess privacy impact during security incidents, including analysis of PHI and PII for regulatory notification decisions.
- Implement privacy-by-design patterns, data minimization, access restrictions, retention rules, consent capture, and related technical controls.
- Translate UK GDPR, HIPAA, CCPA/CPRA, and other U.S. state privacy laws into technical controls and system settings.
- Lead data inventories, data mapping, data classification, PHI/PII distinction, and the OneTrust implementation.
- Configure and maintain OneTrust consent and cookie controls, tag and pixel governance, Global Privacy Control support, and consent propagation across analytics, CRM, and advertising platforms.
- Review vendor privacy and data-handling practices, monitor consent preferences and cookies, analyze potential breach data, and build role-based access controls.
- Automate data subject request workflows, data discovery, classification, masking, encryption, retention, and deletion safeguards using Python or similar languages.
- Manage privacy code and configuration in GitHub, integrate privacy checks into CI/CD pipelines, apply controls through Infrastructure as Code, and write repeatable tests and scripts.
- Partner with legal, security, data engineering, technology, and business teams to translate privacy requirements into technical specifications and explain regulatory concepts clearly.
Requirements
- Bachelor’s degree in a related field is required; a master’s degree is preferred.
- At least 3 years of experience in privacy engineering, privacy operations, information security, or a related technical compliance role.
- Working knowledge of HIPAA, UK GDPR, CCPA/CPRA, and other U.S. state privacy laws, including opt-out signals, sensitive-data consent, and tracking-technology requirements.
- Familiarity with data mapping, data classification, access controls, and vendor risk assessments.
- Experience automating solutions with Python or similar programming and scripting languages.
- Experience with GitHub, CI/CD pipelines, and Infrastructure as Code such as Terraform or CloudFormation.
- Familiarity with SQL, data warehousing, Snowflake, and AWS or other cloud platforms.
- Experience conducting privacy threat modeling such as LINDDUN and privacy impact assessments.
- Experience implementing privacy-by-design and data minimization controls.
- Experience configuring consent management platforms, preferably OneTrust, including cookie categorization, geo-rules, and script blocking.
- Understanding of marketing and analytics technologies including GA4, Meta Pixel, Conversions API, and server-side tagging.
- Privacy certification such as CIPT, CIPP/US, or CIPP/E is preferred.
- Employment is contingent on successful background check, drug screening, and verification of employment, education, and other relevant credentials.
Benefits
- Competitive base salary and annual bonus.
- Paid time off and holidays.
- Employee Stock Purchase Program with a 15% discount.
- Employer-matching 401(k) and profit-sharing program.
- Student Debt Program contributing up to $10,000 toward student loans.
- Tuition assistance program.
- Medical, dental, and vision coverage.
- Professional growth opportunities.
- Onsite role in Frisco, Texas with occasional out-of-area and overnight travel.
About Welltower, Inc.
Welltower, Inc. (NYSE: WELL) is a publicly traded healthcare REIT that invests in seniors housing, wellness communities, and medical office/outpatient real estate, primarily in the U.S., U.K., and Canada. It partners with operating providers and generates returns through rental and operating income from its properties. Founded in 1970 and headquartered in Toledo, Ohio, the company is an S&P 500 constituent focused on aging-related housing and care infrastructure.