IT Privacy Engineer

TAG - The Aspen Group•Chicago, IL

13d

About The Position

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S. and has supported over 20,000 healthcare professionals and team members with close to 1,500 health and wellness offices across 48 states in four distinct categories: dental care, urgent care, medical aesthetics, and animal health. Working in partnership with independent practice owners and clinicians, the team is united with a single purpose: to prove that healthcare can be better and smarter for everyone. TAG provides a comprehensive suite of centralized business support services that power the impact of five consumer-facing businesses: Aspen Dental, ClearChoice Dental Implant Centers, WellNow Urgent Care, Chapter Aesthetic Studio, and Lovet. Each brand has access to a deep community of experts, tools and resources to grow their practices, and an unwavering commitment to delivering high-quality consumer healthcare experiences at scale. As a reflection of our current needs and planned growth we are very pleased to offer a new opportunity to join our dedicated team as a IT Privacy Engineer. Job Overview: A Privacy Engineer designs, implements, and maintains privacy controls and data protection capabilities across the enterprise, with a primary focus on the OneTrust platform. This role is responsible for operationalizing privacy regulations into technical workflows, building and optimizing data mapping and discovery pipelines, managing consent and preference frameworks, and enabling scalable compliance across business units. The Privacy Engineer partners closely with Legal, Information Security, Engineering, and Governance teams to embed privacy-by-design principles into systems, products, and data practices. This role requires a combination of hands-on technical expertise with privacy management platforms and a strong working knowledge of global privacy regulations.

Requirements

At least 5+ years' experience in privacy engineering, data protection, or a related compliance/security engineering discipline
Hands-on experience administering and configuring OneTrust, including at least two of the following modules: Data Mapping, DSAR Automation, Cookie Consent, Assessment Automation, or Vendor Risk Management
Strong understanding of global privacy regulations including GDPR, CCPA/CPRA, HIPAA, and U.S. state privacy laws
Experience integrating privacy platforms with enterprise systems via REST APIs, webhooks, and middleware
Familiarity with data discovery and classification tools (e.g., Informatica, BigID, or native OneTrust discovery)
Solid understanding of data architecture concepts including data lineage, cataloging, and metadata management
Experience with secure software development practices and privacy-by-design principles
Excellent problem-solving, communication, and cross-functional collaboration skills
Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

Nice To Haves

Experience with applications hosted in Google Cloud Platform (GCP), Amazon Web Services (AWS), or Microsoft Azure
Proficiency with scripting in Python, JavaScript, PowerShell, or similar languages for automation and integration tasks
Proficiency with Terraform, infrastructure-as-code, and cloud automation practices
Prior experience with SIEM/logging platforms (e.g., Chronicle, Splunk) for privacy event monitoring and audit
Experience with one or more of the following frameworks: ISO 27701, ISO 27001, NIST Privacy Framework, NIST AI RMF, PCI DSS, SOC 2, or EU AI Act
Working knowledge of Windows, Linux, and Unix environments
Familiarity with data governance platforms (e.g., Collibra, Alation) and their interaction with privacy tooling
Highly trustworthy; leads by example

Responsibilities

Administer, configure, and optimize the OneTrust platform across modules including Data Mapping & Discovery, Privacy Rights Automation (DSAR), Cookie Consent, Vendor Risk Management, and Assessment Automation (PIA/DPIA)
Design and maintain data discovery and classification pipelines to identify, inventory, and map personal and sensitive data across structured and unstructured environments
Build and manage automated Data Subject Access Request (DSAR) workflows, ensuring timely and compliant fulfillment across all applicable jurisdictions
Implement and maintain cookie consent banners, preference centers, and universal consent mechanisms aligned with GDPR, CCPA/CPRA, and emerging state and global privacy laws
Integrate OneTrust with enterprise systems including CMDB, IAM/SSO (Entra, Okta), SIEM/SOAR, HRIS, CRM, and cloud platforms via APIs, connectors, and custom scripting
Develop and execute Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) within OneTrust, collaborating with business stakeholders to identify and mitigate privacy risks
Design and implement Data Loss Prevention (DLP) and redaction controls in partnership with Information Security to prevent unauthorized disclosure of personal or regulated data
Collaborate with Legal and Compliance to translate regulatory requirements (GDPR, CCPA/CPRA, HIPAA, state privacy laws, etc.) into enforceable technical controls and platform configurations
Create and maintain privacy program artifacts including data flow diagrams, processing records (RoPA), policy-as-code configurations, and risk assessment documentation
Monitor, log, and audit privacy-related events for policy violations, regulatory reporting, and incident correlation; generate dashboards and compliance reports from OneTrust
Support privacy incident response by building breach detection workflows, notification timelines, and regulatory reporting mechanisms within OneTrust
Contribute to the development of enterprise privacy standards, playbooks, and architectural patterns that scale across lines of business
Stay current on evolving global privacy regulations, enforcement trends, and OneTrust platform updates; advise stakeholders on their operational impact
Automate privacy compliance checks, assessment workflows, and remediation tracking for scale and operational efficiency