Enterprise Data Security Leader & Risk Management

Highmark Health; Madison (WI); On-site; USD 129,000 - 215,000; Full time

Job summary

enGen seeks a strategic leader to head the Enterprise Data Protection program, directing data security, DLP, data classification, and encryption initiatives across the organization. The role leads a multidisciplinary team and sets the vision, architecture, and execution strategy for enterprise data protection services.

You will partner with security, cloud, infrastructure, privacy, legal, and business teams to protect sensitive information while enabling business objectives.

Qualifications

• Bachelor's degree in Information Security, Information Systems, Information Assurance, Computer Science or related field
• 6 years of relevant experience substitution for a Bachelor's Degree
• Master's degree in Computer Science, Information Security or related field (preferred)
• 7–10 years in Information Security and/or Information Risk Management and/or IT
• 1–3 years mentoring in leadership/Staff management
• 1–3 years developing and executing strategic plans to realize business objectives
• 10–15 years in Information Security and/or Information Risk Management and/or IT (preferred)
• Experience with HITRUST CSF or NIST 800-53/83 frameworks (preferred)
• Experience with SSAE 16/SOC 2 audits (preferred)
• Experience budgeting and fiduciary goals (preferred)
• Industry organization participation (preferred)
• Experience implementing data protection technologies (DLP, DSPM, classification, encryption, etc.)
• Experience securing data across cloud, on-premises, and hybrid environments
• Leading security architecture, engineering, and operations teams
• Experience with enterprise data protection tools (Purview, Forcepoint, Varonis, Netskope, BigID, Defender, Guardium, Imperva, Cyera)

Responsibilities

• Lead data security, DLP, data classification and encryption initiatives
• Define vision, roadmap, architecture, and execution strategy for enterprise data protection services
• Manage a multidisciplinary team across analysts, product owners, architects, and engineers
• Translate complex security concepts into business risk and executive decisions
• Partner with security, cloud, privacy, legal, and business teams to protect sensitive information
• Ensure program maturity, technology strategy, and continuous improvement
• Oversee budgeting, metrics, and resource planning
• Ensure compliance with corporate information security policies

Skills

HIPAA knowledge

PCI DSS

FIPS-140

Teamwork

Interpersonal skills

Process improvement

Project execution

Relationship management

Education

Bachelor's Degree in Information Security or related field

Master's Degree preferred

Tools

Microsoft Purview

Forcepoint

Varonis

Netskope

BigID

Microsoft Defender

IBM Guardium

Imperva SecureSphere

Cyera

Job description

enGen seeks a strategic leader to head the Enterprise Data Protection program, directing data security, DLP, data classification, and encryption initiatives across the organization. The role leads a multidisciplinary team and sets the vision, architecture, and execution strategy for enterprise data protection services.

You will partner with security, cloud, infrastructure, privacy, legal, and business teams to protect sensitive information while enabling business objectives.