Privacy by Design Engineer

About the role

This hybrid position requires the successful candidate to report to the Warren Global Technical Center or Austin Technical Center at least three days per week, or more frequently if business needs dictate. The Privacy by Design Engineer designs, implements, and operationalizes privacy controls that embed privacy, data protection, and regulatory compliance into enterprise data platforms, analytics solutions, AI systems, digital products, and vehicle technologies. The role works closely with Legal, Privacy, Cybersecurity, Data Governance, Product, and Vehicle Engineering teams to translate regulatory obligations and corporate policies into practical, reusable technical controls throughout the software development lifecycle.

Vehicle data scope

The engineer is responsible for privacy‑by‑design implementations involving vehicle‑generated data and vehicle software systems. This includes designing controls for vehicle identifiers, telemetry, diagnostics, customer data, sensor data, connected services, and downstream data ecosystems, covering the full data lifecycle from in‑vehicle generation to cloud ingestion, analytics, AI processing, data sharing, retention, and disposal.

Responsibilities

• Design, develop, test, deploy, and maintain privacy‑by‑design solutions across enterprise platforms and vehicle systems.
• Engineer privacy controls that protect personal, sensitive, and regulated data throughout its lifecycle.
• Build and operationalize privacy‑enhancing technologies and reusable privacy services.
• Analyze business, data, and system requirements to identify privacy risks and control requirements.
• Develop technical specifications and engineering artifacts for privacy capabilities.
• Participate in software design reviews and provide privacy engineering guidance.
• Support development teams with implementation and troubleshooting of privacy controls.
• Contribute to correction of software design issues and privacy‑related defects.
• Communicate privacy engineering best practices across the software engineering community.
• Serve as a Privacy Engineering Subject Matter Expert (SME) within assigned programs and initiatives.
• Implement privacy‑preserving solutions such as pseudonymization, tokenization, encryption, data masking, consent management, access control, data minimization, DLP integrations, and other privacy‑enhancing technologies.
• Embed privacy requirements into data, analytics, AI, software, and vehicle development processes and integrate controls into applications, platforms, APIs, and data pipelines.
• Collaborate with product and platform teams to ensure privacy requirements are addressed during solution design and development.
• Support privacy reviews and solution assessments for new initiatives and technologies.
• Contribute to privacy engineering standards, reference architectures, frameworks, and best practices.
• Translate regulatory, policy, and governance requirements into technical implementation requirements.
• Support privacy impact assessments, control validation activities, and compliance reviews.
• Create technical documentation and implementation guidance for engineering teams.
• Support audits, regulatory reviews, and compliance assessments by providing demonstrable technical controls and gathering evidence of control effectiveness.
• Monitor privacy controls and assist in remediation of identified risks or gaps.
• Drive consistent embedding of privacy requirements into enterprise and vehicle solutions, reducing compliance risk and improving audit readiness.
• Promote reusable privacy engineering capabilities that scale across products, platforms, and vehicle systems.

Required qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related technical field.
• 7+ years of experience in software engineering, platform engineering, cybersecurity, architecture, or related technical disciplines.
• Experience implementing privacy, security, data protection, or governance controls.
• Strong understanding of Privacy by Design principles and data protection concepts.
• Experience working with cross‑functional stakeholders including Legal, Privacy, Compliance, Cybersecurity, or Data Governance teams.
• Strong analytical, problem‑solving, and software development skills.

Preferred qualifications

• Experience implementing privacy engineering, security engineering, or governance solutions in enterprise environments.
• Familiarity with global privacy regulations and frameworks such as GDPR, CCPA/CPRA, and similar data protection requirements.
• Experience with cloud platforms, enterprise data platforms, analytics ecosystems, and API architectures.
• Experience supporting AI, machine learning, or data platform solutions with embedded governance controls.
• Experience with connected vehicle, automotive software, or embedded engineering environments.
• Knowledge of privacy‑enhancing technologies, consent management, and data lifecycle management practices.

Compensation

Base compensation range: $171,700 – $220,500, with actual salary dependent on factors relevant to the position. An incentive pay program offers bonus payouts based on company performance, job level, and individual performance.

Benefits

• Medical, dental, and vision coverage
• Health Savings Account (HSA) and Flexible Spending Accounts (FSA)
• Retirement savings plan
• Sickness and accident benefits
• Life insurance
• Paid vacation and holidays
• Tuition assistance programs
• Employee assistance program
• General Motors vehicle discounts
• Various health and wellbeing programs

This role may be eligible for relocation benefits.

Company vehicle: Upon successful completion of a motor vehicle report review, you may be assigned a General Motors vehicle to drive and evaluate. Participants are required to purchase or lease a qualifying GM vehicle every four years unless an exception applies.

GM does not provide immigration‑related sponsorship for this role. Candidates requiring sponsorship now or in the future should not apply.