Data Privacy & IT Compliance Lead

CVS Health Corporation; Wellesley (MA); Hybride; USD 79 000 - 173 000; Plein temps

Résumé du poste

CVS Health Corporation is seeking a Data Protection Domain SME to lead information classification, obfuscation, encryption, and security controls. You will support data protection governance, guide teams on gaps, and ensure regulatory compliance across PCI, HIPAA, and SOC frameworks.

The role requires collaboration with application teams, strong analytical skills, and the ability to work in a blended hybrid environment. A BS in a cybersecurity-related field is preferred.

Qualifications

• Strong knowledge of data protection techniques including obfuscation/masking, classifications, encryption at rest & in transit, retention & destruction.
• 3+ years of experience implementing data security and privacy engineering solutions
• Knowledge of PCI, HIPAA, SOX, SOC1, SOC2, HiTrust, GDPR, CCPA, NIST, ISO 27001
• Excellent problem-solving, analytical, and communication skills
• Ability to work independently with minimal supervision and manage multiple priorities
• Experience working on cross-functional projects with multiple teams
• Proficient in MS Excel (pivot tables, lookups, conditional formatting, Power Query)

Responsabilités

• Develop and implement data security governance framework aligned with regulatory requirements and policies.
• Guide application teams to identify data protection gaps and remedial actions for non-conformance.
• Assess IT policies and control standards for system and operational compliance.
• Maintain files and data sources for governance and reporting, ensuring data quality and integrity.
• Create and maintain process docs, job aids, FAQs, and support materials for application teams.
• Promote best practices for Data Privacy and Protection, ensuring compliance with PCI, HIPAA, SOX, HiTrust, NIST, etc.
• Stay updated on industry trends to evolve data protection strategy and solutions.

Connaissances

Data protection

Experience

Regulations & frameworks

Problem solving

Communication

Independent work

Multi-tasking

Stakeholder management

Excel proficiency

Formation

Bachelor's Degree in CS/IT/Cybersecurity

Description du poste

CVS Health Corporation is seeking a Data Protection Domain SME to lead information classification, obfuscation, encryption, and security controls. You will support data protection governance, guide teams on gaps, and ensure regulatory compliance across PCI, HIPAA, and SOC frameworks.

The role requires collaboration with application teams, strong analytical skills, and the ability to work in a blended hybrid environment. A BS in a cybersecurity-related field is preferred.