Edtech.com's Summary

Washington University in St. Louis is hiring a Privacy Engineer II to strengthen the university’s data privacy and data protection program through data discovery, classification, and governance work. The engineer builds data mapping activities, supports Data Subject Access Request and Data Protection Impact Assessment processes, and reviews compliance with privacy regulations such as GDPR, HIPAA, and FERPA. Working closely with stakeholders across the organization, the role also produces reports and metrics and recommends ways to tighten data protection practices.

Highlights

Configure, manage, and tune the university’s privacy tools and platforms so they run effectively and support day-to-day privacy operations.
Evaluate existing privacy safeguards and measure them against regulatory mandates to confirm the university is compliant.
Partner with stakeholders across the organization to classify sensitive data, validate data discovery results, and report metrics on what is found.
Coordinate Data Protection Impact Assessments with the Chief Privacy Officer and develop the guidelines, processes, and training that go with them.
Flag potential privacy risks to the Chief Privacy Officer and the Information Security Manager, then open and track remediation tickets with various IT departments.
Use the university’s Data Security Posture Management tool to drive data discovery and classification across its data sources.
Prefers a bachelor’s degree and three years of relevant experience, including coordinating data mapping, DSAR, and DPIA processes.
Prefers working knowledge of GDPR, HIPAA, and FERPA and the ability to apply those regulations practically to data inventories.
Prefers advanced SQL skills for querying and validating data source scans, along with experience in cloud data environments and SaaS platforms.
Fully remote full-time role with 40 scheduled hours per week and a posted salary range of $65,900 to $112,700 per year.

Privacy Engineer II Full Description

Scheduled Hours

Position Summary

Serves as a key contributor to the university’s data privacy and data protection program, providing expertise in data discovery, classification, and governance initiatives. This role is responsible for developing data mapping activities, supporting Data Subject Access Request (DSAR) and Data Protection Impact Assessment (DPIA) processes, and reviewing compliance with privacy regulations such as GDPR, HIPAA, and FERPA. The engineer will develop, enhance, monitor, assess, and support privacy operations and data protection programs, leverage the university’s Data Security Posture Management (DSPM) tool, and work closely with stakeholders across the organization to:

identify and classify sensitive data,
validate discovery results,
develop meaningful reports and metrics, and
provide recommendations to strengthen data protection practices.

Primary Duties & Responsibilities

Configure, manage, operationalize, and optimize our privacy tools and platforms.
Evaluate privacy safeguards to measure compliance with regulatory mandates.
Partner with stakeholders to classify sensitive data, validate discovery results, report metrics, and recommend data protection improvements.
Coordinate Data Protection Impact Assessments with Chief Privacy Officer, and develop related guidelines, processes, and training.
Identify potential privacy risks and report to Chief Privacy Officer and Information Security Manager. Open and track tickets with various IT departments.
Perform other duties as assigned.

The above statements are intended to describe the general nature and level of work performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all job duties performed by the personnel so classified. Management reserves the right to revise or amend duties at any time.

Required Qualifications

Education: A diploma, certification or degree is not required.

Certifications/Professional Licenses: No specific certification/professional license is required for this position.

Work Experience: No specific work experience is required for this position.

Driver’s License: A driver’s license is not required for this position.

More About This Job

Required Qualifications:

Strong analytical, written and verbal communication skills.
Comfortable presenting findings and recommendations to senior management.
Systems management and documentation skills.
Interest and ability to learn new technologies and processes.

Preferred Qualifications:

Knowledge of data search, discovery, classification, and data mapping methodologies.
Knowledge of data privacy regulations (GDPR, HIPAA, FERPA) and ability to apply them practically to data inventories.
Experience coordinating data mapping, DSAR and DPIA processes.
Advanced SQL skills for querying and validating data source scans.
Experience working with cloud data environments and SaaS platforms in a data discovery/classification context.
Ability to Develop and provide audit ready reports and provide project updates to senior management.
Experience with Data Security Posture Management (DSPM) solutions.

Preferred Qualifications

Education: B.S. - Bachelor of Science

Certifications/Professional Licenses: No additional certification/professional licenses unless stated elsewhere in the job posting.

Work Experience: Relevant Experience (3 Years)

Skills: Advanced SQL, Analytical Thinking, Data Classification, Data Discovery, Data Mapping, Data Privacy, Data Protection Impact Assessment (DPIA), Digital Signal Processing (DSP), Effective Written Communication, EU Data Privacy, HIPAA Regulations, Information Security, Interpersonal Communication, Privacy Regulations, Process Development (PD), Report Development, Verbal Communications

Grade

G13

Salary Range

$65,900.00 - $112,700.00 / Annually

The salary range reflects base salaries paid for positions in a given job grade across the University. Individual rates within the range will be determined by factors including one’s qualifications and performance, equity with others in the department, market rates for positions within the same grade and department budget.

Pre-Employment Screening

All external candidates receiving an offer for employment will be required to submit to pre-employment screening for this position. The screenings will include criminal background check and, as applicable for the position, other background checks, drug screen, an employment and education or licensure/certification verification, physical examination, certain vaccinations and/or governmental registry checks. All offers are contingent upon successful completion of required screening.

EEO Statement

Washington University in St. Louis is committed to the principles and practices of equal employment opportunity. It is the University’s policy to provide equal opportunity and access to persons in all job titles without regard to race, ethnicity or shared ancestry, color, national origin, citizenship (where prohibited by federal law), age, religion, sex, sexual orientation, gender identity or expression, disability, protected veteran status, or genetic information. As a federal contractor, the university maintains affirmative action programs to implement its equal employment opportunity policy for individuals with disabilities and protected veterans, in accordance with Section 503 of the Rehabilitation Act of 1973, as amended, and the Vietnam Era Veterans’ Readjustment Assistance Act of 1974 (VEVRAA), as amended.

Let me find your next job.

Thanks - you're signed up.

Privacy Engineer II

Edtech.com's Summary

Privacy Engineer II Full Description

Security Technology Analyst

Network Security Engineer Lead

Information Security Professional IV, Lead

Information Security Professional II

Field Office Info Systems Security Manager