IT Privacy Engineer

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S. and has supported over 20,000 healthcare professionals and team members with close to 1,500 health and wellness offices across 48 states in four distinct categories: dental care, urgent care, medical aesthetics, and animal health. Working in partnership with independent practice owners and clinicians, the team is united with a single purpose: to prove that healthcare can be better and smarter for everyone. TAG provides a comprehensive suite of centralized business support services that power the impact of five consumer-facing businesses: Aspen Dental, ClearChoice Dental Implant Centers, WellNow Urgent Care, Chapter Aesthetic Studio, and Lovet. Each brand has access to a deep community of experts, tools and resources to grow their practices, and an unwavering commitment to delivering high-quality consumer healthcare experiences at scale.

As a reflection of our current needs and planned growth we are very pleased to offer a new opportunity to join our dedicated team as a IT Privacy Engineer.

Job Overview:

A Privacy Engineer designs, implements, and maintains privacy controls and data protection capabilities across the enterprise, with a primary focus on the OneTrust platform. This role is responsible for operationalizing privacy regulations into technical workflows, building and optimizing data mapping and discovery pipelines, managing consent and preference frameworks, and enabling scalable compliance across business units. The Privacy Engineer partners closely with Legal, Information Security, Engineering, and Governance teams to embed privacy-by-design principles into systems, products, and data practices. This role requires a combination of hands-on technical expertise with privacy management platforms and a strong working knowledge of global privacy regulations.

Essential Job Duties:

• Administer, configure, and optimize the OneTrust platform across modules including Data Mapping & Discovery, Privacy Rights Automation (DSAR), Cookie Consent, Vendor Risk Management, and Assessment Automation (PIA/DPIA)

• Design and maintain data discovery and classification pipelines to identify, inventory, and map personal and sensitive data across structured and unstructured environments

• Build and manage automated Data Subject Access Request (DSAR) workflows, ensuring timely and compliant fulfillment across all applicable jurisdictions

• Implement and maintain cookie consent banners, preference centers, and universal consent mechanisms aligned with GDPR, CCPA/CPRA, and emerging state and global privacy laws

• Integrate OneTrust with enterprise systems including CMDB, IAM/SSO (Entra, Okta), SIEM/SOAR, HRIS, CRM, and cloud platforms via APIs, connectors, and custom scripting

• Develop and execute Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) within OneTrust, collaborating with business stakeholders to identify and mitigate privacy risks

• Design and implement Data Loss Prevention (DLP) and redaction controls in partnership with Information Security to prevent unauthorized disclosure of personal or regulated data

• Collaborate with Legal and Compliance to translate regulatory requirements (GDPR, CCPA/CPRA, HIPAA, state privacy laws, etc.) into enforceable technical controls and platform configurations

• Create and maintain privacy program artifacts including data flow diagrams, processing records (RoPA), policy-as-code configurations, and risk assessment documentation

• Monitor, log, and audit privacy-related events for policy violations, regulatory reporting, and incident correlation; generate dashboards and compliance reports from OneTrust

• Support privacy incident response by building breach detection workflows, notification timelines, and regulatory reporting mechanisms within OneTrust

• Contribute to the development of enterprise privacy standards, playbooks, and architectural patterns that scale across lines of business

• Stay current on evolving global privacy regulations, enforcement trends, and OneTrust platform updates; advise stakeholders on their operational impact

• Automate privacy compliance checks, assessment workflows, and remediation tracking for scale and operational efficiency

Skills and Experience

• At least 5+ years' experience in privacy engineering, data protection, or a related compliance/security engineering discipline

• Hands-on experience administering and configuring OneTrust, including at least two of the following modules: Data Mapping, DSAR Automation, Cookie Consent, Assessment Automation, or Vendor Risk Manage