Enterprise Data Security & Risk Manager

Highmark Health; Baton Rouge (LA); On-site; USD 129,000 - 215,000; Full time

Job summary

enGen is seeking a senior leader to drive the Enterprise Data Protection program, shaping strategy, architecture, and execution across data security and DLP. The role collaborates with security, privacy, legal and business teams to translate risk into actionable priorities and decisions.

The candidate will guide a multidisciplinary team and own the roadmap, ensuring maturity and continuous improvement of data protection services while aligning with organizational objectives.

Qualifications

• Bachelor’s Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field.
• 7–10 years in Information Security and/or Information Risk Management and/or Information Technology
• 1–3 years in mentoring others in a leadership role
• Experience developing and executing enterprise data protection strategies, roadmaps, and operating models.

Responsibilities

• Provide leadership and strategy for the Enterprise Data Protection program and associated architecture and execution.
• Oversee data protection technologies including DLP, encryption and access controls; ensure compliance with policies.
• Manage cross-functional teams and coordinate budgets, staffing and risk management.

Skills

HIPAA knowledge

Teamwork

Interpersonal skills

Process improvement

Project execution

Relationship management

Education

Bachelor's degree in Information Security

Master’s degree in Computer Science or Information Security

Tools

HITRUST CSF

NIST 800-83

SOC 2

Job description

enGen is seeking a senior leader to drive the Enterprise Data Protection program, shaping strategy, architecture, and execution across data security and DLP. The role collaborates with security, privacy, legal and business teams to translate risk into actionable priorities and decisions.

The candidate will guide a multidisciplinary team and own the roadmap, ensuring maturity and continuous improvement of data protection services while aligning with organizational objectives.