Director of Enterprise Data Security & Risk

Highmark Health; Trenton (NJ); On-site; USD 129,000 - 215,000; Full time

Job summary

enGen seeks a senior leader to direct enterprise data protection, including DLP, data classification, and file/database activity monitoring. You will drive the vision, architecture and execution across security, cloud, legal, and business teams to protect sensitive information while enabling organizational goals.

The ideal candidate will have 7–10 years in information security/risk management, strong leadership, and a track record of translating complex concepts into risk-based decisions.

Qualifications

• 7–10 years in information security and/or information risk management.
• Experience presenting security concepts to diverse audiences.
• 1–3 years in mentoring and staff leadership.
• Experience creating and executing strategic plans for business objectives.
• Strong collaboration with security, privacy, legal and business teams.

Responsibilities

• Lead the enterprise data protection program and align with corporate strategy.
• Oversee data loss prevention, data classification, encryption, and monitoring.
• Translate technical concepts into business risks and executive decisions.
• Direct a multidisciplinary team of analysts, architects and engineers.
• Ensure operational execution, policy compliance, and continuous improvement.

Skills

Leadership

Strategic thinking

Business risk translation

Cross-functional collaboration

Team mentoring

Education

Bachelor's Degree in Information Security

Master's Degree in Computer Science or Security (preferred)

Tools

HITRUST CSF

NIST CSF

SSAE 16 / SOC 2

Microsoft Purview

Forcepoint

Varonis / Netskope / BigID

Job description

enGen seeks a senior leader to direct enterprise data protection, including DLP, data classification, and file/database activity monitoring. You will drive the vision, architecture and execution across security, cloud, legal, and business teams to protect sensitive information while enabling organizational goals.

The ideal candidate will have 7–10 years in information security/risk management, strong leadership, and a track record of translating complex concepts into risk-based decisions.