Chief Data Protection & Privacy Strategy Lead

CVS Health Corporation; Scottsdale (AZ); On-site; USD 175,000 - 335,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

CVS Health Corporation seeks an Executive Director of Data Protection and Privacy to own the enterprise data protection program and mature it across the organization. Drive strategy, design, and operations for DLP, data discovery, and classification with executive engagement to reduce data exposure and regulatory risk.

The role partners with Legal and Compliance, engineers, and business units to embed privacy-by-design, ensure HIPAA/GDPR/CCPA alignment, and advance a scalable, defensible data

Qualifications

• In-depth expertise in data protection, DLP, data classification, and privacy engineering concepts.
• Strong executive communication translating risk to technical and non-technical stakeholders.
• Experience guiding enterprise data protection programs at senior levels.

Responsibilities

• Define enterprise Data Protection and Privacy strategy, roadmap, and multi-year plan.
• Own design, deployment, and tuning of enterprise DLP across endpoints, network, email, and cloud.
• Lead data discovery initiatives to inventory sensitive data across stores.
• Establish data classification standards, taxonomy, and labeling.
• Embed privacy-by-design and privacy-enhancing technologies in data pipelines.
• Ensure HIPAA, GDPR, CCPA/CPRA alignment and support audits.
• Lead insider risk and data exfiltration use cases and incident response.
• Provide governance metrics and executive reporting to risk committees.
• Mentor and scale a high-performing data protection team.
• Collaborate with Legal, Internal Audit, and business units on emerging risks.

Skills

Data protection

DLP

Privacy engineering

Executive communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree or JD preferred

Job description

CVS Health Corporation seeks an Executive Director of Data Protection and Privacy to own the enterprise data protection program and mature it across the organization. Drive strategy, design, and operations for DLP, data discovery, and classification with executive engagement to reduce data exposure and regulatory risk.

The role partners with Legal and Compliance, engineers, and business units to embed privacy-by-design, ensure HIPAA/GDPR/CCPA alignment, and advance a scalable, defensible data