Data Privacy & Security Engineer

Position Summary: The Data Privacy and Security Engineer will lead and support enterprise-wide privacy initiatives, ensuring alignment with global data protection regulations such as GDPR, HIPAA, and CPRA. This role is responsible for managing cross-functional privacy projects using Agile methodology, operationalizing privacy compliance through technical and procedural controls, and integrating privacy risk management practices across business units.

Primary Accountabilities:

Privacy Program & Project Management (25%)

• Oversee privacy initiatives in collaboration with internal teams and external partners, outside counsel and consultants to enhance privacy operations.

• Develop bi-weekly privacy project status reports, tracking accomplishments, obstacles, risks, and actions against the plan.

• Develop and operationalize project plans using SCRUM Agile Methodology

• Facilitate monthly core privacy team meetings across Enterprise, MarTech, and Healthcare divisions, ensuring alignment on priorities.

• Support the Privacy Officer in data governance, strategic planning, and privacy committee meetings (including Data, BI & AI, and Security & Risk committees).

• Ensure compliance with data privacy and security regulations (e.g., GDPR, HIPAA, ISO 27001, CPRA).

Operationalizing Privacy Compliance (25%)

Assist in rolling out enterprise privacy and data security standards and procedures, including:

• ServiceNow Record of Processing Activity (RoPA) workflows.

• Data Subject Rights (DSR) processes for access and deletion requests.

• Consumer opt-out of data sale procedures.

• Privacy Impact Assessments (PIAs) and vendor assurance processes in ServiceNow.

• Online tracker and cookie banner compliance across 14+ domains.

• Privacy-centric threat modeling using models like LINDDUN

• Work with teams to embed privacy controls into the technology stack, ensuring audit-ready documentation – Privacy by Design

• Drive de-identification standards and data clean-room assurance for privacy-preserving analytics.

• Develop privacy training materials and facilitate train-the-trainer sessions for enterprise privacy practices.

• Develop, enforce, and maintain data security policies, standards, and best practices.

• Design and implement data protection strategies to protect sensitive company and customer information.

• Deploy and manage Data Security Posture Management (DSPM) platform, analyze and action any applicable findings

• Develop automation using programming languages and/or frameworks to assist in auditing and enforcing desired state for data security and protection controls

Privacy Risk & Compliance Integration (25%)

• Support ServiceNow Privacy Controls Framework implementation, including risk-based metrics and regulatory mappings.

• Assist in conducting privacy impact assessments (PIAs) to assess data use cases and privacy risks.

• Work with procurement and business teams to develop new client privacy vetting procedures for evaluating privacy notices and online tracking practices.

• Track and manage ongoing privacy compliance obligations related to evolving U.S. and international privacy laws.

Stakeholder Collaboration & Change Management (25%)

• Partner with IT, Legal, Compliance, Security, and Business teams to ensure privacy is embedded into processes and decision-making.

• Help navigate evolving privacy requirements by fostering a privacy-first culture across the organization.

• Ensure alignment between privacy governance, data strategy, and regulatory expectations.

• Collaborate on privacy and data security product and services reviews

• Proactively ensure alignment between privacy, governance, data strategy, regulatory and other key stakeholders.

Required Qualifications:

• Bachelor’s degree required in Computer Sci