Privacy Engineer - onsite Frisco, TX

WELLTOWER – REIMAGINE REAL ESTATE WITH US

At Welltower, we’re transforming how the world thinks about senior living and wellness-focused real estate. As a global leader in residential wellness and healthcare infrastructure, we create vibrant, purpose-driven communities where housing, healthcare, and hospitality converge. Our culture is fast-paced, collaborative, and endlessly ambitious—guided by our mantra:
The only easy day was yesterday.

We’re looking for bold, independent thinkers who thrive on challenge, embrace complexity, and are driven to deliver long-term value. Every team member is empowered to think like an owner, innovate fearlessly, and lead from where they stand. If you're passionate about outcomes and inspired by the opportunity to shape the future of healthcare infrastructure, we want you on our best-in-class team.

Welltower is looking for a Privacy Engineer to help build and scale the technical side of our privacy program. This role will work at the intersection of legal, security, and technology, turning privacy requirements into practical, working controls that protect our data and help the business move faster.

This role will design and build the technical solutions, in specified platforms, of privacy compliance to reflect the policies, positions and initiatives we are taking. This role will bridge the gap between legal requirements and technical implementation and will build the tools, tests, and controls that put them into practice. This is a hands-on role with high visibility and a real opportunity to shape a growing program.

• Privacy risk assessments: Integrate privacy reviews, including privacy impact assessments (PIAs) and privacy threat modeling, into the existing security intake process so that privacy risks are identified early, both for new vendors and for facilities before they are onboarded without duplicating assessments or slowing the business down.
• Incident response: Work alongside the security team during incidents, assessing privacy impact in parallel with the technical investigation. Analyze impacted PHI and PII to support fast decision-making and regulatory notification analysis.
• Privacy by design: Get involved early in the planning of new systems, products, and initiatives. Working with business and technology teams, this role will identify privacy risks and implement privacy‑by‑design patterns and data minimization controls such as collecting only the data that’s needed, limiting who can access it, setting retention rules, and capturing consent where required, so privacy is built in from day one rather than added later.
• Regulatory translation: Interpret what privacy laws such as UK GDPR, HIPAA, CCPA, and other U.S. state privacy laws require in practice, and turn those requirements into specific technical controls and system settings. Examples include access restrictions, data retention and deletion rules, consent capture, and automated checks that confirm we stay compliant over time.
• Data governance: Lead and maintain critical initiatives such as data inventories, data mapping, data classification (including distinguishing PHI from PII), and our One Trust implementation, keeping them current as the business evolves.
• Privacy automation and technical controls: Build and automate the technical side of the privacy program using Python or similar program languages. That means connecting data subject request workflows to the systems where data lives, running automated data discovery and classification, and working with Data Engineering and Security to put in place safeguards such as masking, encryption, and retention and deletion jobs.
  
  Manage code and configuration in Git Hub, build privacy check into CI/CD pipelines, and…