Head of Enterprise Data Protection & Risk

Highmark Health; Charleston (WV); On-site; USD 129,000 - 215,000; Full time

Job summary

enGen seeks a senior leader to drive the Enterprise Data Protection program, overseeing data security, DLP, data classification, and activity monitoring across the organization. You will translate complex security concepts into business risk and strategic priorities for executive stakeholders.

The role requires deep technical expertise in data security architecture, with the ability to guide a multidisciplinary team and align security initiatives with business objectives.

Qualifications

• Bachelor’s Degree in Information Security, Information Systems, Information Assurance, Computer Science or related field.
• 6 years of relevant experience can substitute for a Bachelor's Degree.
• Preferred: Master’s Degree in Computer Science, Information Security or related field.

Responsibilities

• Lead the Enterprise Data Protection program and set the vision, roadmap, architecture, and execution strategy.
• Manage multidisciplinary team of analysts, product owners, architects, and engineers.
• Ensure compliance with security policies and standards; communicate risks to executives.
• Oversee project management and continuous improvement across data protection portfolio.
• Collaborate with security, cloud, infrastructure, privacy, legal, and business teams.

Skills

HIPAA compliance

Team collaboration

Project execution

Relationship management

Security governance

Strategic leadership

Education

Bachelor’s Degree in Information Security

Substitutions: 6 years experience

Master’s Degree (preferred)

Tools

HITRUST CSF

NIST 800-53/83

Data Protection tools (DLP, DSPM)

Microsoft Purview/Guardium/Imperia

Job description

enGen seeks a senior leader to drive the Enterprise Data Protection program, overseeing data security, DLP, data classification, and activity monitoring across the organization. You will translate complex security concepts into business risk and strategic priorities for executive stakeholders.

The role requires deep technical expertise in data security architecture, with the ability to guide a multidisciplinary team and align security initiatives with business objectives.