Principal Security & Privacy Engineer

What you'll do

• Manage and mature the Privacy by Design framework across medical device portfolios and supporting systems.
• Identify privacy risks and define technical and procedural controls for products, systems, and third-party integrations.
• Conduct data privacy assessments, including Data Protection Impact Assessments (DPIAs), and manage mitigation plans.
• Create and maintain privacy documentation, data maps, compliance evidence, and regulatory submission deliverables.
• Lead privacy investigations, coordinate corrective actions, and support incident response processes.
• Align privacy requirements with threat assessments and security risk management activities in partnership with engineering teams.
• Provide expert consultation on product-specific privacy matters to legal, regulatory, and business stakeholders.
• Mentor staff and lead initiatives for privacy awareness, training, and continuous improvement.

What we're looking for

• A Bachelor’s degree with 7 years of experience, a Master’s with 5 years, or a PhD with 3 years is required.
• Extensive experience with Privacy by Design principles and integrating privacy into product development lifecycles is required.
• Experience in privacy and security incident management is preferred.
• A background in Cybersecurity, Information Security, or IT including risk management and incident response is preferred.
• Expertise in global privacy laws such as HIPAA and GDPR is preferred.
• Experience in the healthcare industry or another heavily regulated industry is preferred.
• CIPP, CHPC, or similar certification, or formal education in data privacy and compliance, is preferred.
• Work authorization at the time of hire and for the duration of employment.