Healthcare Data Governance, Privacy & Risk Leader

CVS Health Corporation; Hartford (CT); On-site; USD 83,000 - 183,000; Full time

Benefits offered by this job

Bonus opportunities

Equity program

Comprehensive benefits

Job summary

CVS Health Corporation is seeking a senior leader to drive the enterprise Data Governance, Risk, and Privacy program across Commercial, Medicare, and Medicaid. You will establish governance frameworks, roles, and controls to ensure compliant, secure use of health data in line with HIPAA and state laws.

You will partner with Legal, Compliance, Security, and business leaders to translate regulations into practical governance processes, oversee risk-based controls, and deliver KPI dashboards for

Qualifications

• 7+ years in healthcare, data governance, privacy, risk management, or a related field.
• Deep knowledge of HIPAA, CMS requirements, and state privacy laws.
• Experience with data governance frameworks, data lineage, metadata management, and stewardship practices

Responsibilities

• Define and operationalize governance frameworks, policies, standards, and stewardship models.
• Translate enterprise strategy into program plans, roadmaps, and execution trackers
• Establish data ownership, lineage, quality controls, and metadata management across critical data domains
• Enable audit-defensible data use aligned with TPO (Treatment, Payment, and Operations)
• Execute governance workflows for data sharing, access approvals, and risk evaluation
• Enforce data use policies, including TPO-aligned use, secondary use, and access controls
• Define controls for de-identified, limited, and identified datasets
• Monitor downstream data handling and ensure alignment of contractual terms, consent, and actual data use
• Identify, assess, and mitigate data-related risks across sharing, access, and downstream use
• Ensure compliance with HIPAA, state privacy laws, and CMS interoperability requirements
• Evaluate data use cases for permissible use (TPO, non-TPO, secondary use)
• Assess vendor and third-party data sharing risks and control requirements
• Support audits, compliance reviews, and regulatory inquiries with governance documentation
• Define and track governance KPIs and operational metrics
• Develop executive-ready dashboards and visualizations for governance performance and risk trends
• Lead governance forums and working groups to drive decision-making and accountability
• Enable knowledge sharing, training, and capability uplift across governance practitioners
• Enable scalable, reusable governance processes across programs and business functions
• Documented governance frameworks, policies, standards, and stewardship models
• Governance program plans, roadmaps, and execution trackers
• Enterprise data lineage, metadata, and approved data use inventories
• Risk assessments, risk logs, and mitigation plans
• TPO-aligned data use decisions with supporting rationale and approvals
• KPI dashboards and governance performance reporting
• Audit-ready governance documentation and evidence

Skills

Data governance

Privacy & security

Risk management

Regulatory compliance

Stakeholder management

Executive communication

Program management

Financial planning

Education

Bachelor's degree or higher

Tools

Data governance tools

Metadata management tools

Job description

CVS Health Corporation is seeking a senior leader to drive the enterprise Data Governance, Risk, and Privacy program across Commercial, Medicare, and Medicaid. You will establish governance frameworks, roles, and controls to ensure compliant, secure use of health data in line with HIPAA and state laws.

You will partner with Legal, Compliance, Security, and business leaders to translate regulations into practical governance processes, oversee risk-based controls, and deliver KPI dashboards for