Principal Security & Privacy Engineer

Medtronic seeks a Principal Security & Privacy Engineer to lead privacy-by-design initiatives across connected medical devices in the Neuromodulation and Pelvic Health R&D organization. The role combines technical leadership in privacy risk management, regulatory compliance, and cross-functional collaboration to embed privacy protections throughout product lifecycles.

Responsibilities

• Own and mature Privacy by Design framework, integrating privacy requirements into product development and governance
• Lead cross-functional teams through privacy risk identification and control definition for products and systems
• Conduct Data Protection Impact Assessments and drive mitigation planning
• Develop privacy documentation, data maps, compliance evidence, and regulatory submission materials
• Lead privacy investigations and incident response coordination with remediation support

Requirements

• Bachelor's degree with 7 years relevant experience, or Master's with 5 years, or PhD with 3 years
• Extensive Privacy by Design experience integrating privacy into product development lifecycles
• Privacy and security incident management experience
• Knowledge of global privacy regulations including HIPAA and GDPR
• Healthcare or other heavily regulated industry background preferred
• CIPP, CHPC, or equivalent privacy certification preferred
• Understanding of medical device regulations and FDA cybersecurity guidance