Data Privacy Engineer

The Illinois Tollway is dedicated to providing and promoting a safe and efficient system of highways while ensuring the highest possible level of service to our customers. Whether it's I-PASS, the Move Illinois Program, open road tolling or keeping you safe with our H.E.L.P. trucks, we are committed to delivering great benefits and services to customers.

The Tollway is a user-fee system – no state or federal tax dollars are used to support maintenance and operations. Operations are funded by toll and concession revenues.

Under the leadership of the Board of Directors and Executive Staff, the Tollway is committed to achieving the following goals: increase collaboration with regional transportation and planning agencies, promote the regional economy, maintain financial integrity, foster environmental responsibility and sustainability, maintain the safety and efficiency of the Tollway system, further transparency and accountability, enhance customer service, and maintain public trust.

The Illinois Tollway is seeking a Data Privacy Engineer to lead the design, implementation, and continuous improvement of enterprise data privacy and protection capabilities. This position serves as a strategic partner in Information Technology to Information Technology Security, Data Governance, Legal, and business stakeholders to ensure privacy requirements are embedded into the Tollway’s systems, applications, and data lifecycle.

The Data Privacy Engineer will champion Privacy by Design principles, develop technical privacy controls, support regulatory compliance initiatives, and enhance the Tollway’s ability to responsibly manage sensitive information while enabling data-driven innovation. This position will play a key role in strengthening the Tollway’s data governance, cybersecurity, AI governance, and data privacy programs.

• Design, implement, and maintain enterprise data privacy controls across structured and unstructured data environments.
• Implement Embed Privacy by Design principles into application development, cloud solutions, data platforms, and AI initiatives.
• Develop technical standards and guidance for protecting Personally Identifiable Information (PII), Sensitive Personal Information (SPI), payment information, and operational data.

• Design and implement Privacy Enhancing Technologies (PETs), including:
  • Data masking, Tokenization, Encryption, Pseudonymization, and Anonymization.

• Support enterprise data governance by documenting privacy requirements throughout the data lifecycle.
• Assist in developing privacy metrics, dashboards, scorecards, and compliance reporting.

• Support compliance with applicable federal, state, and industry regulations including:
  • Illinois Personal Information Protection Act (PIPA), Driver Privacy Protection Act (DPPA), Illinois Biometric Information Privacy Act (BIPA), PCI-DSS, NIST Privacy Framework, State of Illinois cybersecurity standards, Applicable federal transportation regulations.

• Conduct Privacy Impact Assessments (PIAs) and privacy risk assessments.
• Perform data flow mapping to identify collection, storage, processing, sharing, and retention of sensitive information.
• Partner with cybersecurity team to conduct privacy threat modeling and risk analyses.
• Recommend technical and administrative safeguards to mitigate identified privacy risks.
• Support third-party privacy reviews and vendor risk assessments.
• Partner with Tollway stakeholders to implement privacy controls and guidelines for Artificial Intelligence solutions.
• Evaluate emerging technologies to identify privacy implications and recommend appropriate safeguards.
• Serve as a trusted advisor to project teams throughout procurement, solution design and implementation.
• Foster strong relationships with business stakeholders to…