Privacy Engineer II

Scheduled Hours 40 Position Summary Serves as a key contributor to the university’s data privacy and data protection program, providing expertise in data discovery, classification, and governance initiatives. This role is responsible for developing data mapping activities, supporting Data Subject Access Request (DSAR) and Data Protection Impact Assessment (DPIA) processes, and reviewing compliance with privacy regulations such as GDPR, HIPAA, and FERPA. The engineer will develop, enhance, monitor, assess, and support privacy operations and data protection programs, leverage the university’s Data Security Posture Management (DSPM) tool, and work closely with stakeholders across the organization to: identify and classify sensitive data, validate discovery results, develop meaningful reports and metrics, and provide recommendations to strengthen data protection practices. Primary Duties & Responsibilities Configure, manage, operationalize, and optimize our privacy tools and platforms. Evaluate privacy safeguards to measure compliance with regulatory mandates. Partner with stakeholders to classify sensitive data, validate discovery results, report metrics, and recommend data protection improvements. Coordinate Data Protection Impact Assessments with Chief Privacy Officer, and develop related guidelines, processes, and training. Identify potential privacy risks and report to Chief Privacy Officer and Information Security Manager. Open and track tickets with various IT departments. Perform other duties as assigned. The above statements are intended to describe the general nature and level of work performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all job duties performed by the personnel so classified. Management reserves the right to revise or amend duties at any time. Required Qualifications Education: A diploma, certification or degree is not required. Certifications/Professional Licenses: No specific certification/professional license is required for this position. Work Experience: No specific work experience is required for this position. Driver’s License: A driver’s license is not required for this position. Required Qualifications Strong analytical, written and verbal communication skills. Comfortable presenting findings and recommendations to senior management. Systems management and documentation skills. Interest and ability to learn new technologies and processes. Preferred Qualifications Knowledge of data search, discovery, classification, and data mapping methodologies. Knowledge of data privacy regulations (GDPR, HIPAA, FERPA) and ability to apply them practically to data inventories. Experience coordinating data mapping, DSAR and DPIA processes. Advanced SQL skills for querying and validating data source scans. Experience working with cloud data environments and SaaS platforms in a data discovery/classification context. Ability to Develop and provide audit ready reports and provide project updates to senior management. Experience with Data Security Posture Management (DSPM) solutions. Preferred Qualifications Education: B.S. - Bachelor of Science Certifications/Professional Licenses: No additional certification/professional licenses unless stated elsewhere in the job posting. Work Experience: Relevant Experience (3 Years) Skills: Advanced SQL, Analytical Thinking, Data Classification, Data Discovery, Data Mapping, Data Privacy, Data Protection Impact Assessment (DPIA), Digital Signal Processing (DSP), Effective Written Communication, EU Data Privacy, HIPAA Regulations, Information Security, Interpersonal Communication, Privacy Regulations, Process Development (PD), Report Development, Verbal Communications Grade G13 Salary Range $65,900.00 - $112,700.00 / Annually The salary range reflects base salaries paid for positions in a given job grade across the University. Individual rates within the range will be determined by factors including one’s qualifications and performance, equity with others in the department, market rates for positions within the same grade and department budget. Pre-Employment Screening All external candidates receiving an offer for employment will be required to submit to pre-employment screening for this position. The screenings will include criminal background check and, as applicable for the position, other background checks, drug screen, an employment and education or licensure/certification verification, physical examination, certain vaccinations and/or governmental registry checks. All offers are contingent upon successful completion of required screening. EEO Statement Washington University in St. Louis is committed to the principles and practices of equal employment opportunity. It is the University’s policy to provide equal opportunity and access to persons in all job titles without regard to race, ethnicity or shared ancestry, color, national origin, citizenship (where prohibited by federal law), age, religion, sex, sexual orientation, gender identity or expression, disability, protected veteran status, or genetic information. As a federal contractor, the university maintains affirmative action programs to implement its equal employment opportunity policy for individuals with disabilities and protected veterans, in accordance with Section 503 of the Rehabilitation Act of 1973, as amended, and the Vietnam Era Veterans’ Readjustment Assistance Act of 1974 (VEVRAA), as amended. #J-18808-Ljbffr Washington University in St. Louis