Senior Data Protection Specialist

Security1stconsulting; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Security1stconsulting seeks a Senior Data Protection Specialist to support a major public health cybersecurity and compliance initiative under the BPHC IT Security Infrastructure and Governance Improvement Program.

The role emphasizes developing data classification frameworks, ePHI discovery, DLP coordination, and data privacy governance aligned with HIPAA, HITECH, and NIST standards.

Qualifications

• Strong experience in healthcare cybersecurity and data privacy.
• Expertise in ePHI protection and Data Loss Prevention (DLP).
• Experience with NIST Cybersecurity Framework and governance initiatives.
• Excellent stakeholder communication and project leadership skills.

Responsibilities

• Develop enterprise Data Classification frameworks and policies.
• Lead ePHI discovery and data flow mapping activities.
• Coordinate with DLP vendors and project stakeholders.
• Build data asset inventories and classification catalogs.
• Evaluate and recommend DLP tools and technologies.
• Support HIPAA, HITECH, and NIST-aligned security initiatives.

Skills

Healthcare cybersecurity

Data privacy

ePHI protection

DLP (Data Loss Prevention)

NIST CSF governance

Stakeholder communication

Project leadership

Job description

We are seeking an experienced Senior Data Protection Specialist to support a major public health cybersecurity and compliance initiative under the BPHC IT Security Infrastructure and Governance Improvement Program

Responsibilities

• Develop enterprise Data Classification frameworks and policies
• Lead ePHI discovery and data flow mapping activities
• Coordinate with DLP vendors and project stakeholders
• Build data asset inventories and classification catalogs
• Evaluate and recommend DLP tools and technologies
• Support HIPAA, HITECH, and NIST-aligned security initiatives

Requirements

• Strong experience in healthcare cybersecurity and data privacy
• Expertise in ePHI protection and Data Loss Prevention (DLP)
• Experience with NIST Cybersecurity Framework and governance initiatives
• Excellent stakeholder communication and project leadership skills