Job Description
This role is categorized as hybrid. This means the successful candidate is expected to report to Warren Global Technical Center or Austin Technical Center three times per week, at minimum [or other frequency dictated by the business if more than 3 days].
The Role
The Privacy by Design Engineer is responsible for designing, implementing, and operationalizing privacy controls that embed privacy, data protection, and regulatory compliance into enterprise data platforms, analytics solutions, AI systems, digital products, and vehicle technologies. This role serves as a technical practitioner within a dedicated Privacy Engineering function, ensuring privacy requirements are incorporated early, consistently, and at scale throughout the software development lifecycle.
The engineer collaborates closely with Legal, Privacy, Cybersecurity, Data Governance, Product, and Vehicle Engineering teams to translate regulatory obligations, corporate policies, and privacy risk requirements into practical, reusable technical controls and engineering solutions. This role focuses on building privacy capabilities that enable the compliant use of personal, sensitive, and regulated data while minimizing risk, improving audit readiness, and supporting innovation.
Vehicle Data Scope
This role explicitly includes responsibility for privacy-by-design implementations involving vehicle-generated data and vehicle software systems. The Privacy by Design Engineer partners with vehicle engineering, embedded software, connected vehicle, and systems engineering teams to ensure privacy requirements are incorporated throughout vehicle development processes. This includes designing privacy controls for vehicle identifiers, telemetry, diagnostics, customer data, sensor data, connected services, and downstream data ecosystems.
The role supports the complete vehicle data lifecycle—from in-vehicle data generation and collection through cloud ingestion, analytics, AI processing, data sharing, retention, and disposal—ensuring privacy protections are engineered into vehicle platforms and services from the outset.
What You’ll Do
Privacy Engineering Solutions
- Design, develop, test, deploy, and maintain privacy-by-design solutions across enterprise platforms and vehicle systems.
- Engineer privacy controls that protect personal, sensitive, and regulated data throughout its lifecycle.
- Build and operationalize privacy-enhancing technologies and reusable privacy services.
- Design and develop technical privacy solutions for current, emerging, and strategic enterprise and vehicle programs.
- Analyze business, data, and system requirements to identify privacy risks and control requirements.
- Perform detailed design analysis and recommend privacy-by-design implementation approaches.
- Develop technical specifications and engineering artifacts for privacy capabilities.
- Participate in software design reviews and provide privacy engineering guidance.
- Support development teams with implementation and troubleshooting of privacy controls.
- Contribute to the correction of software design issues and privacy-related defects.
- Communicate privacy engineering best practices across the software engineering community.
- Serve as a Privacy Engineering Subject Matter Expert (SME) within assigned programs and initiatives.
Privacy Control Implementation
- Implement privacy-preserving solutions such as:
- Pseudonymization and alternate identifiers
- Tokenization and encryption
- Data masking and obfuscation
- Consent and preference management controls
- Access control and authorization mechanisms
- Data minimization solutions
- Data loss prevention (DLP) integrations
- Privacy-enhancing technologies (PETs)
Engineering Integration
- Embed privacy requirements into data, analytics, AI, software, and vehicle development processes.
- Partner with engineering teams to integrate privacy controls into applications, platforms, APIs, and data pipelines.
- Collaborate with product and platform teams to ensure privacy requirements are addressed during solution design and development.
- Support privacy reviews and solution assessments for new initiatives and technologies.
Standards and Governance
- Contribute to privacy engineering standards, reference architectures, frameworks, and best practices.
- Translate regulatory, policy, and governance requirements into technical implementation requirements.
- Support privacy impact assessments, control validation activities, and compliance reviews.
- Create technical documentation and implementation guidance for engineering teams.
Regulatory and Audit Support
- Support audits, regulatory reviews, and compliance assessments through implementation of demonstrable technical controls.
- Assist in gathering evidence and documenting privacy control effectiveness.
- Monitor privacy controls and support remediation of identified risks or gaps.
Impact and Outcomes
- Privacy requirements consistently embedded into enterprise and vehicle solutions.
- Reduced privacy, compliance, and regulatory risk across digital and vehicle ecosystems.
- Faster delivery of compliant data, analytics, AI, and connected vehicle capabilities.
- Improved audit readiness and regulatory defensibility through demonstrable technical controls.
- Increased adoption of privacy-by-design practices across engineering organizations.
- Reusable privacy engineering capabilities that scale across products, platforms, and vehicle systems.
- Strong partnership between Engineering, Privacy, Legal, Cybersecurity, and Data Governance organizations to enable responsible innovation.
Your Skills & Abilities (Required Qualifications)
- Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related technical field.
- 7+ years of experience in software engineering, platform engineering, cybersecurity, architecture, or related technical disciplines.
- Experience implementing privacy, security, data protection, or governance controls.
- Strong understanding of Privacy by Design principles and data protection concepts.
- Experience working with cross-functional stakeholders including Legal, Privacy, Compliance, Cybersecurity, or Data Governance teams.
- Strong analytical, problem-solving, and software development skills.
What Can Give You a Competitive Advantage (Preferred Qualifications)
- Experience implementing privacy engineering, security engineering, or governance solutions in enterprise environments.
- Familiarity with global privacy regulations and frameworks including GDPR, CCPA/CPRA, and similar data protection requirements.
- Experience with cloud platforms, enterprise data platforms, analytics ecosystems, and API architectures.
- Experience supporting AI, machine learning, or data platform solutions with embedded governance controls.
- Experience with connected vehicle, automotive software, or embedded engineering environments.
- Knowledge of privacy-enhancing technologies, consent management, and data lifecycle management practices.
This job may be eligible for relocation benefits.
Company Vehicle: Upon successful completion of a motor vehicle report review, you will be eligible to participate in a company vehicle evaluation program, through which you will be assigned a General Motors vehicle to drive and evaluate. Note: program participants are required to purchase/lease a qualifying GM vehicle every four years unless one of a limited number of exceptions applies.
Compensation:
- The expected base compensation for this role is: $171,700 - $220,500. Actual base compensation within the identified range will vary based on factors relevant to the position.
- Bonus Potential: An incentive pay program offers payouts based on company performance, job level, and individual performance.
- Benefits: GM offers a variety of health and wellbeing benefit programs. Benefit options include medical, dental, vision, Health Savings Account, Flexible Spending Accounts, retirement savings plan, sickness and accident benefits, life insurance, paid vacation & holidays, tuition assistance programs, employee assistance program, GM vehicle discounts and more.
