Data Privacy Security Engineer

Responsibilities

• Protect sensitive data across collection, processing, storage, sharing, retention, and deletion
• Map data flows and assess privacy and security risks across applications, analytics, integrations, and third-party providers
• Implement encryption, tokenization, masking, anonymization, retention, and least-privilege data access controls
• Work with data engineering teams to secure pipelines, databases, warehouses, and cloud data services on AWS and GCP
• Assess customer data shared with third-party AI model vendors and define minimization, approved use, retention, and access controls
• Own data and privacy controls for SC TRM and BNM RMiT, including assessments, evidence, remediation, and audit support
• Support privacy impact assessments, access reviews, monitoring, incident response, and privacy-by-design reviews

Requirements

• Degree in Computer Science, Information Security, Data Engineering, or related field, or equivalent experience
• 3+ years in data security, privacy engineering, security engineering, or data platform engineering
• Experience implementing and owning SC TRM and BNM RMiT controls relevant to data protection and technology risk
• Understanding of privacy-by-design, data classification, retention, access management, and third-party data sharing
• Knowledge of encryption, key management, masking, tokenization, anonymization, and secure data processing
• Experience securing databases, data pipelines, and AWS or GCP data platforms; familiarity with AI vendor data flows is beneficial
• Familiarity with applicable privacy and security frameworks and ability to collaborate across technical and compliance teams
• Strong English communication skills