Senior Data Privacy Engineer

CVS Health•Chicago, IL

27d

About The Position

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues - caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.POSITION SUMMARYWe are seeking a highly skilled and experienced Senior Privacy Engineer to join our Data Protection team. The Privacy Engineer will be responsible for embedding privacy by design principles into our systems and data-handling processes. This role requires a strong technical background combined with a deep understanding of privacy regulations. The successful candidate will design, build, and maintain the technical controls that protect personal data and ensure the company's continuous compliance.What we expect of you - Act as the technical subject matter expert on privacy, guiding product and engineering teams from the initial design phase through launch to ensure new features and systems are built with privacy controls integrated.Design and implement privacy-enhancing technologies (PETs), such as data anonymization, pseudonymization, encryption, masking, and differential privacy techniques.Conduct privacy threat modeling, data flow analysis, technical reviews and Privacy Impact Assessments (PIAs) on systems, architecture, and code to identify and mitigate privacy risks, system vulnerabilities, and regulatory compliance gaps.Build, maintain, and integrate internal tools for privacy automation, such as automated data discovery, classification, consent management, and policy enforcement across our technology stack.Work with application and data engineering teams to enforce privacy requirements throughout the entire data lifecycle, including data collection, storage, processing, access, retention, and deletion.Collaborate with engineering, product, legal, and compliance teams to translate privacy and regulatory requirements (e.g., GDPR, CCPA, HIPAA) into technical designs, policies, and guardrails.Monitor and research new privacy-enhancing technologies, evolving global regulations, and industry best practices.Evaluate, prototype, and operationalize advanced privacy technologies (e.g. synthetic data, privacy-preserving analytics, homomorphic encryption, secure multiparty computation).Provide mentorship and guidance to other engineers on privacy-aware development practices, secure coding, and data lifecycle protection.

Requirements

5+ years of hands-on experience in security engineering, privacy engineering, privacy enhancing technologies or related fields.
5+ years of experience with privacy and data protection regulations (GDPR, CCPA, HIPAA, etc.) and translating them into technical requirements.
3+ years of experience in one or more programming or scripting languages (e.g. Python, Java, Go, Rust, or similar).
3+ years of experience in designing and implementing cryptographic or data protection systems (e.g. encryption, tokenization, key management).
3+ years of experience in performing privacy threat modeling, data flow mapping, and conducting DPIAs/PIAs.
3+ years of experience in working in CI/CD environments, Infrastructure as Code (IaC), and automating security/privacy checks.
Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience).

Nice To Haves

Professional Certifications such as CDPSE, CIPP, CIPT, CIPM, CISSP, or equivalent.
Experience building and scaling privacy platforms or features in a fast-paced environment.
Familiarity with Data Loss Prevention (DLP) systems and data mapping tools.
Familiarity with cloud platforms (AWS, Azure, GCP) and various data technologies (SQL, NoSQL databases, data lakes, etc.).
Excellent communication and ability to explain complex technical and legal concepts to diverse audiences.
Experience in healthcare, insurance, or highly regulated industries.

Responsibilities

Act as the technical subject matter expert on privacy, guiding product and engineering teams from the initial design phase through launch to ensure new features and systems are built with privacy controls integrated.
Design and implement privacy-enhancing technologies (PETs), such as data anonymization, pseudonymization, encryption, masking, and differential privacy techniques.
Conduct privacy threat modeling, data flow analysis, technical reviews and Privacy Impact Assessments (PIAs) on systems, architecture, and code to identify and mitigate privacy risks, system vulnerabilities, and regulatory compliance gaps.
Build, maintain, and integrate internal tools for privacy automation, such as automated data discovery, classification, consent management, and policy enforcement across our technology stack.
Work with application and data engineering teams to enforce privacy requirements throughout the entire data lifecycle, including data collection, storage, processing, access, retention, and deletion.
Collaborate with engineering, product, legal, and compliance teams to translate privacy and regulatory requirements (e.g., GDPR, CCPA, HIPAA) into technical designs, policies, and guardrails.
Monitor and research new privacy-enhancing technologies, evolving global regulations, and industry best practices.
Evaluate, prototype, and operationalize advanced privacy technologies (e.g. synthetic data, privacy-preserving analytics, homomorphic encryption, secure multiparty computation).
Provide mentorship and guidance to other engineers on privacy-aware development practices, secure coding, and data lifecycle protection.

Benefits

Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.
No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.
Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume