Enterprise Data Security Manager: Lead Data Protection

Highmark Health; Pennsylvania; Hybrid; USD 129,000 - 215,000; Full time

Job summary

Highmark Health seeks an experienced leader to drive the Enterprise Data Protection program, directing data security, DLP, classification, encryption, and key management across cloud and on‑prem environments. You will lead a multidisciplinary team, set vision and strategy, and translate technical risk into executive priorities.

The role requires deep expertise in security architecture, governance, and operations, with strong collaboration with security, privacy, legal, and business stakeholders

Qualifications

• 7–10 years in Information Security and/or Information Risk Management and IT

Responsibilities

• Hire and manage staff: coaching and development; rewards and recognition; performance management
• Oversee day-to-day department operations; develop policies and programs; budget responsibility possible
• Lead security solutions, ensure standards, methodologies; coordinate resources, time, risk management
• Lead organizational change; promote security innovation; ensure training in security topics
• Ensure compliance with Corporate and Information Security policies and procedures
• Communicate with all levels; prepare reports; represent HM Health Solutions with outside entities

Skills

HIPAA knowledge

PCI DSS knowledge

Team leadership

Regulatory knowledge

Project execution

Relationship management

Education

Bachelor's degree in Information Security or related field

Master's degree preferred

Tools

Microsoft Purview

Forcepoint

Varonis

Netskope

BigID

Microsoft Defender

IBM Guardium

Imperva SecureSphere

Cyera

Job description

Highmark Health seeks an experienced leader to drive the Enterprise Data Protection program, directing data security, DLP, classification, encryption, and key management across cloud and on‑prem environments. You will lead a multidisciplinary team, set vision and strategy, and translate technical risk into executive priorities.

The role requires deep expertise in security architecture, governance, and operations, with strong collaboration with security, privacy, legal, and business stakeholders