Privacy Engineer, Health

Location: London, United Kingdom

Salary: £93,500–£161,800 per year

Company

Microsoft AI develops consumer health experiences, including Copilot Health, that provide AI-powered guidance while protecting sensitive health information.

What you will do

• Serve as the primary engineering point of contact for privacy, compliance, and regulatory matters.
• Embed data minimization, purpose limitation, and privacy-by-design into product architecture.
• Translate UK and EU GDPR, HIPAA, and the EU AI Act into technical requirements, guardrails, and automated controls.
• Lead privacy and security design reviews, threat modeling, risk assessments, and scalable mitigations.
• Design privacy infrastructure covering data classification, access controls, consent, audit logging, data lineage, and retention.
• Build reusable privacy tooling and partner with legal, compliance, security, and product teams on audits and regulatory evidence.

Requirements

• Extensive professional software engineering experience building and operating production systems at scale, with significant privacy, security, or data-protection expertise.
• Strong programming skills in at least one major language, such as C#, Python, Go, or Java, with experience delivering backend and infrastructure systems.
• Ability to translate GDPR, HIPAA, and similar regulatory requirements into technical designs and enforceable controls.
• Hands-on knowledge of privacy-by-design, data minimization, RBAC/ABAC, encryption, audit logging, and data lifecycle management.
• Experience with privacy and security reviews, threat modeling, risk assessments, and cross-functional communication.
• Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.

Nice to have

• Health technology experience or experience in another highly regulated industry.
• Knowledge of HIPAA, HITRUST, ISO 27001/27701, NHS data governance, FHIR, and clinical data handling.
• Experience with differential privacy, anonymization, de-identification, secure enclaves, or federated learning.
• Experience with AI/ML systems, Azure, large-scale data systems, or certifications such as CIPP/E or CIPT.

Culture & Benefits

• Hands-on senior individual-contributor role with responsibility for technical direction.
• Close collaboration with product, engineering, security, legal, and compliance stakeholders.
• Opportunity to influence privacy-preserving design for AI-powered health products.
• Benefits and additional compensation may be available depending on the role.