Privacy Engineer II; Remote; WashU IT

Remote, US

Scheduled Hours 40

Serves as a key contributor to the university’s data privacy and data protection program, providing expertise in data discovery, classification, and governance initiatives. This role is responsible for developing data mapping activities, supporting Data Subject Access Request (DSAR) and Data Protection Impact Assessment (DPIA) processes, and reviewing compliance with privacy regulations such as GDPR, HIPAA, and FERPA. The engineer will develop, enhance, monitor, assess, and support privacy operations and data protection programs, leverage the university’s Data Security Posture Management (DSPM) tool, and work closely with stakeholders across the organization to:

• identify and classify sensitive data
• validate discovery results
• develop meaningful reports and metrics
• provide recommendations to strengthen data protection practices

• Configure, manage, operationalize, and optimize our privacy tools and platforms.
• Evaluate privacy safeguards to measure compliance with regulatory mandates.
• Partner with stakeholders to classify sensitive data, validate discovery results, report metrics, and recommend data protection improvements.
• Coordinate Data Protection Impact Assessments with Chief Privacy Officer, and develop related guidelines, processes, and training.
• Identify potential privacy risks and report to Chief Privacy Officer and Information Security Manager.
• Open and track tickets with various IT departments.
• Perform other duties as assigned.

The above statements are intended to describe the general nature and level of work performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all job duties performed by the personnel so classified. Management reserves the right to revise or amend duties at any time.

A diploma, certification or degree is not required.

Certifications/Professional Licenses:
No specific certification/professional license is required for this position.

Work Experience:

No specific work experience is required for this position.

Skills:

Not Applicable.

Driver's License: A driver's license is not required for this position.

Knowledge of data search, discovery, classification, and data mapping methodologies. Knowledge of data privacy regulations (GDPR, HIPAA, FERPA) and ability to apply them practically to data inventories. Experience coordinating data mapping, DSAR and DPIA processes. Advanced SQL skills for querying and validating data source scans. Experience working with cloud data environments and SaaS platforms in a data discovery/classification context. Ability to develop and provide audit ready reports and provide project updates to senior management.

Experience with Data Security Posture Management (DSPM) solutions.

Preferred Qualifications

Education:

B.S.

- Bachelor of Science.

Preferred Qualifications Certifications/Professional Licenses:
No additional certification/professional licenses unless stated elsewhere in the job posting.

Preferred Qualifications

Work Experience:

Relevant Experience (3 Years).

Preferred Qualifications

Skills:

Advanced SQL, Analytical Thinking, Data Classification, Data Discovery, Data Mapping, Data Privacy, Data Protection Impact Assessment (DPIA), Digital Signal Processing (DSP), Effective Written Communication, EU Data Privacy, HIPAA Regulations, Information Security, Interpersonal Communication, Privacy Regulations, Process Development (PD), Report Development, Verbal Communications.

Grade G13 Salary Range $65,900.00 - $ / Annually The salary range reflects base salaries paid for positions in a given job grade across the University. Individual rates within the range will be determined by factors including one's qualifications and performance, equity with others in the department, market rates for positions within the same grade and department budget.

If you are unable to use our online application system and would like an accommodation, please email Candidate Questions or call the dedicated accommodation inquiry number at  and leave a voicemail with the nature of your request. All qualified individuals must be able to perform the essential functions of the position satisfactorily and, if requested, reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of their job, absent undue hardship.

All…