Data Protection & Privacy Compliance Analyst

CVS Health Corporation; Woonsocket (RI); Hybrid; USD 79,000 - 173,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Paid time off

Retirement savings

Wellness programs

Job summary

CVS Health Corporation is seeking a Data Protection Domain SME to advance information classification, data obfuscation, encryption, and data security governance. You will guide application teams, maintain governance files, and ensure compliance with PCI, HIPAA, NIST, and other standards.

The role is hybrid, based in Woonsocket RI with remote options, and requires strong analytical, communication, and independent-work skills.

Qualifications

• Strong knowledge of data protection techniques and best practices including data obfuscation/masking, encryption at rest and in transit, data retention and destruction.
• Experience implementing data security and privacy engineering solutions and frameworks (3+ years).
• Familiarity with PCI, HIPAA, SOX, SOC1, SOC2, HiTrust, GDPR, CCPA, NIST, ISO 27001.

Responsibilities

• Develop and implement data security governance framework aligned with regulatory requirements and company policies.
• Assist application teams in identifying protection gaps and remedial action plans.
• Interpret IT policies and control standards for system and operational compliance.
• Maintain data sources for governance and reporting with data quality and integrity.
• Create and update process docs, job-aids, FAQs and other support materials.
• Promote best practices for Data Privacy and Protection across regulations and standards.

Skills

Data Protection

Data obfuscation

Encryption

Regulatory knowledge

Analytical skills

Communication skills

Independent worker

MS Excel

Education

Bachelor's Degree in CS/IT/Cybersecurity

Job description

CVS Health Corporation is seeking a Data Protection Domain SME to advance information classification, data obfuscation, encryption, and data security governance. You will guide application teams, maintain governance files, and ensure compliance with PCI, HIPAA, NIST, and other standards.

The role is hybrid, based in Woonsocket RI with remote options, and requires strong analytical, communication, and independent-work skills.