Data Protection & Privacy Compliance Analyst

Signal Corps Regimental Association; Wellesley (MA); Hybrid; USD 79,000 - 173,000; Full time

Job summary

CVS Health is seeking a Data Protection Domain SME to lead data security governance, classification, encryption, and privacy controls across the enterprise. The role focuses on building and improving our protection framework while ensuring compliance with industry regulations and contractual obligations.

The ideal candidate will partner with application teams, manage ongoing compliance workloads, and communicate complex risks clearly to technical and non-technical stakeholders.

Qualifications

• Must understand data protection techniques, classifications, encryption, and retention policies.
• Experience implementing data security and privacy solutions across regulatory needs.
• Ability to interpret IT policies and control standards for compliance.

Responsibilities

• Develop and implement data security governance framework aligned with regulations and company policies.
• Guide application teams on data protection gaps and remedial action plans.
• Assess IT policies and control standards for system compliance.
• Maintain data sources and metrics for governance and reporting.
• Create and update process documentation and user aids for teams.
• Promote practices covering PCI, HIPAA, SOX, HiTrust, NIST, and others.
• Stay updated on data security trends to evolve protection strategies.

Skills

Data protection concepts

Data obfuscation

Data classification

Encryption

Policy compliance

Independent work

Communication skills

Project multitasking

MS Excel

Education

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field

Equivalent work experience (HS diploma + 3 years relevant)

Tools

MS Excel

Job description

CVS Health is seeking a Data Protection Domain SME to lead data security governance, classification, encryption, and privacy controls across the enterprise. The role focuses on building and improving our protection framework while ensuring compliance with industry regulations and contractual obligations.

The ideal candidate will partner with application teams, manage ongoing compliance workloads, and communicate complex risks clearly to technical and non-technical stakeholders.