Executive Director, Privacy & Data Protection — Leader

CVSHealth; Scottsdale (AZ); On-site; USD 175,000 - 335,000; Full time

Job summary

CVS Health is seeking an Executive Director of Data Protection and Privacy to own the enterprise data protection program. The role drives strategy, design, and operational execution of DLP, data discovery, classification, and privacy engineering across the organization, interfacing with senior leadership, Legal, and Compliance in a highly regulated healthcare environment.

The role requires deep technical fluency, executive presence, and proven leadership to reduce data exposure risk, ensure

Qualifications

• Extensive experience leading data protection programs in large organizations.
• Proven track record implementing DLP, data discovery, and data classification.
• Strong knowledge of HIPAA, GDPR, CCPA/CPRA, and privacy laws.

Responsibilities

• Define and drive enterprise Data Protection and Privacy strategy and roadmap.
• Own design and deployment of enterprise DLP across endpoints, networks, and cloud.
• Lead data discovery, classification, and tagging across data stores.
• Embed privacy-by-design in data pipelines and AI/ML workflows.
• Align with legal/compliance on data subject requests and audits.
• Lead insider risk initiatives and data incident response.
• Establish governance metrics and executive reporting.
• Mentor and scale a team of engineers and analysts.

Skills

Data protection strategy

DLP controls

Data discovery

Data classification

Privacy engineering

Regulatory awareness

Executive communication

Team leadership

Cross-functional collaboration

Incident response

Education

Bachelor's degree in CS/IT/CYBER/related

Master's degree or JD preferred

Job description

CVS Health is seeking an Executive Director of Data Protection and Privacy to own the enterprise data protection program. The role drives strategy, design, and operational execution of DLP, data discovery, classification, and privacy engineering across the organization, interfacing with senior leadership, Legal, and Compliance in a highly regulated healthcare environment.

The role requires deep technical fluency, executive presence, and proven leadership to reduce data exposure risk, ensure