Senior Cloud Data Protection & DLP Engineer

CVS Health; United States; Remote; USD 122,000 - 204,000; Full time

Job summary

CVS Health seeks a Senior Cloud Data Security Engineer - DLP to lead enterprise DLP across cloud, endpoint, email and SaaS, protecting PHI, PII, PCI, and CVS Health data. You will drive data classification, labeling, policy enforcement, and automation while aligning with HIPAA, NIST, CIS and other regulations.

You will partner across cybersecurity, privacy, compliance, data engineering and business teams to mature data protection programs, implement CNAPP/Zero Trust controls, and deliver clear

Qualifications

• 5+ years designing and deploying enterprise cloud security and data protection solutions.
• 5+ years administering DLP platforms such as Purview, Zscaler, or Palo Alto.
• 5+ years implementing DLP policies across cloud, endpoints, email, and SaaS.
• 5+ years working with AWS, Azure, and/or GCP with security controls.
• Strong knowledge of Zero Trust, CASB, CSPM, CNAPP and related frameworks.
• Experience protecting PHI, PII, PCI, and proprietary CVS Health data.

Responsibilities

• Design and mature enterprise DLP strategies, policies, and controls.
• Lead end-to-end DLP program lifecycle including classification and incident management.
• Architect cloud data protection across AWS, Azure, GCP, and hybrid environments.
• Enforce AI/ML data protection for generative AI, LLMs, and MLOps.
• Develop dashboards and executive reporting on DLP effectiveness and risk trends.
• Collaborate with legal, compliance, privacy, and business stakeholders on strategy.

Skills

DLP

Cloud security

Data governance

Zero Trust

Data classification

Education

Bachelor's degree or equivalent

Tools

Microsoft Purview

Zscaler

Palo Alto

Job description

CVS Health seeks a Senior Cloud Data Security Engineer - DLP to lead enterprise DLP across cloud, endpoint, email and SaaS, protecting PHI, PII, PCI, and CVS Health data. You will drive data classification, labeling, policy enforcement, and automation while aligning with HIPAA, NIST, CIS and other regulations.

You will partner across cybersecurity, privacy, compliance, data engineering and business teams to mature data protection programs, implement CNAPP/Zero Trust controls, and deliver clear