Data Privacy Engineer

This job was posted by https://illinoisjoblink.illinois.gov : For more information, please see: https://illinoisjoblink.illinois.gov/jobs/13821569 ## Position Overview The Illinois Tollway is dedicated to providing and promoting a safe and efficient system of highways while ensuring the highest possible level of service to our customers. Whether it's I-PASS, theMove Illinois Program, open road tolling or keeping you safe with our H.E.L.P. trucks, we are committed to delivering great benefits and services to customers.\ The Tollway is a user-fee system no state or federal tax dollars are used to support maintenance and operations. Operations are funded by toll and concession revenues.\ \ Under the leadership of the Board of Directors and Executive Staff, the Tollway is committed to achieving the following goals: increase collaboration with regional transportation and planning agencies, promote the regional economy, maintain financial integrity, foster environmental responsibility and sustainability, maintain the safety and efficiency of the Tollway system, further transparency and accountability, enhance customer service, and maintain public trust. The Illinois Tollway is seeking a Data Privacy Engineer to lead the design, implementation, and continuous improvement of enterprise data privacy and protection capabilities. This position serves as a strategic partner in Information Technology to Information Technology Security, Data Governance, Legal, and business stakeholders to ensure privacy requirements are embedded into the Tollways systems, applications, and data lifecycle. The Data Privacy Engineer will champion Privacy by Design principles, develop technical privacy controls, support regulatory compliance initiatives, and enhance the Tollways ability to responsibly manage sensitive information while enabling data-driven innovation. This position will play a key role in strengthening the Tollways data governance, cybersecurity, AI governance, and data privacy programs. ## Essential Job Functions - Design, implement, and maintain enterprise data privacy controls across structured and unstructured data environments. - Implement Embed Privacy by Design principles into application development, cloud solutions, data platforms, and AI initiatives. - Develop technical standards and guidance for protecting Personally Identifiable Information (PII), Sensitive Personal Information (SPI), payment information, and operational data. {=html} - Design and implement Privacy Enhancing Technologies (PETs), including: - Data masking, Tokenization, Encryption, Pseudonymization, and Anonymization. - Support enterprise data governance by documenting privacy requirements throughout the data lifecycle. - Assist in developing privacy metrics, dashboards, scorecards, and compliance reporting. - Support compliance with applicable federal, state, and industry regulations including: - Illinois Personal Information Protection Act (PIPA), Driver Privacy Protection Act (DPPA), Illinois Biometric Information Privacy Act (BIPA), PCI-DSS, NIST Privacy Framework, State of Illinois cybersecurity standards, Applicable federal transportation regulations. - Conduct Privacy Impact Assessments (PIAs) and privacy risk assessments. - Perform data flow mapping to identify collection, storage, processing, sharing, and retention of sensitive information. - Partner with cybersecurity team to conduct privacy threat modeling and risk analyses. - Recommend technical and administrative safeguards to mitigate identified privacy risks. - Support third-party privacy reviews and vendor risk assessments. - Partner with Tollway stakeholders to implement privacy controls and guidelines for Artificial Intelligence solutio ns. - Evaluate emerging technologies to identify privacy implications and recommend appropriate safeguards. - Serve as a trusted advisor to project teams throughout procurement, solution design and implementation. - Foster strong relationships with business stakeholders to promote a culture of responsible data use.