Principal Security & Privacy Engineer
About The Position
The Neuromodulation and Pelvic Health Research & Development (R&D) organizations develop and support medical device technologies that address chronic pain, movement disorders, overactive bladder, non-obstructive urinary retention, and other conditions requiring advanced therapeutic solutions. These teams partner across engineering, security, regulatory, quality, and legal functions to deliver products that meet patient, customer, and global regulatory requirements while protecting sensitive health and personal data. As the Principal Security & Privacy Engineer, you will serve as the technical leader responsible for advancing Privacy by Design practices across a portfolio of connected medical devices and supporting technology systems. This role provides hands-on leadership for privacy risk management, regulatory compliance activities, privacy assessments, incident response, and cross-functional collaboration to ensure privacy requirements are embedded throughout the product lifecycle.
Requirements
- Bachelor’s degree with 7 years of relevant experience OR a Master’s degree with 5 years of relevant experience OR a PhD with 3 years of relevant experience
- Extensive experience with Privacy by Design principles and integrating privacy into product development lifecycles.
Nice To Haves
- Privacy and security incident management experience
- Cybersecurity / Information Security and/or IT background, including understanding of data protection practices, risk management processes, cybersecurity principles, and incident response methodologies.
- Expertise in global privacy laws including HIPAA and GDPR.
- Experience in the healthcare industry or another heavily regulated industry.
- CIPP, CHPC, or similar certification, or proven experience and/or formal education in data privacy and compliance.
- Understanding of medical device regulations and standards (e.g., FDA pre- and post-market guidance on cybersecurity for medical device manufacturers, ISO 13485, ISO 81001-5-1).
- For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.
Responsibilities
- Own and continuously mature the Privacy by Design framework, integrating privacy requirements into product development processes, governance activities, and lifecycle management practices.
- Lead cross-functional teams through Privacy by Design activities, identifying privacy risks and defining appropriate technical and procedural controls for products, systems, and third-party integrations.
- Conduct data privacy assessments, including Data Protection Impact Assessments (DPIAs), and drive mitigation planning and implementation.
- Develop and maintain privacy documentation, data maps, compliance evidence, policies, procedures, and regulatory submission deliverables.
- Lead privacy investigations and corrective actions, coordinating remediation activities and supporting privacy incident response processes.
- Partner with product security engineering teams to align privacy requirements with threat assessments, security risk management activities, and product assurance objectives.
- Provide privacy consultation and subject matter expertise to engineering, legal, regulatory, and business stakeholders on product-specific privacy matters.
- Mentor privacy and security professionals and contribute to privacy awareness, training, metrics, and continuous improvement initiatives.
Benefits
- Health, Dental and vision insurance
- Health Savings Account
- Healthcare Flexible Spending Account
- Life insurance
- Long-term disability leave
- Dependent daycare spending account
- Tuition assistance/reimbursement
- Simple Steps (global well-being program)
- Incentive plans
- 401(k) plan plus employer contribution and match
- Short-term disability
- Paid time off
- Paid holidays
- Employee Stock Purchase Plan
- Employee Assistance Program
- Non-qualified Retirement Plan Supplement (subject to IRS earning minimums)
- Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
