Privacy Engineer II, WashU IT

Washington University in St. Louis (WashU IT) is hiring a Privacy Engineer II to work on the university's data privacy and data protection program. The role covers data discovery, classification and governance: building data maps, supporting Data Subject Access Request (DSAR) and Data Protection Impact Assessment (DPIA) processes, and reviewing compliance with GDPR, HIPAA and FERPA. The engineer runs the university's Data Security Posture Management (DSPM) tool and works with stakeholders across the university to identify and classify sensitive data, validate discovery results, report metrics, and recommend data protection improvements. This is a fully remote position (Remote, US), 40 hours per week, grade G13.

Primary duties: configure, manage and tune the university's privacy tools and platforms; evaluate privacy safeguards against regulatory mandates; coordinate DPIAs with the Chief Privacy Officer and write the related guidelines, processes and training; identify privacy risks and report them to the Chief Privacy Officer and Information Security Manager; open and track tickets with IT departments.

Required qualifications: strong analytical, written and verbal communication skills; comfort presenting findings and recommendations to senior management; systems management and documentation skills; interest in learning new technologies and processes.

Preferred qualifications: B.S. and 3 years of relevant experience; knowledge of data search, discovery, classification and data mapping methods; working knowledge of GDPR, HIPAA and FERPA applied to data inventories; experience coordinating data mapping, DSAR and DPIA processes; advanced SQL for querying and validating data source scans; cloud data and SaaS discovery experience; audit-ready reporting; experience with DSPM solutions.

Salary range: $65,900 - $112,700 per year. Benefits include up to 22 vacation days, 10 holidays, a 403(b) plan with university contributions starting at 7%, and tuition benefits.