Senior Manager, Privacy & Data Governance — Incident Response

CVS Health; Scottsdale (AZ); On-site; USD 83,000 - 183,000; Full time

Job summary

CVS Health, through its Aetna COE, seeks a Senior Manager of Technology, Data, Privacy, and Third-Party Risk Legal Services to oversee privacy incident response and governance. You will work with cross-functional teams to enforce data protection standards and respond to data breaches while maintaining HIPAA and state privacy compliance.

The role emphasizes policy development, investigations, and collaboration across departments to ensure a robust privacy program and regulatory adherence.

Qualifications

• 7+ years in Privacy, healthcare data governance, risk management, or compliance.
• 5+ years in healthcare regulations (HIPAA, CMS, state privacy laws).
• Experience investigating and handling privacy incidents from start to finish.
• Experience drafting privacy policies and ensuring regulatory compliance.

Responsibilities

• Oversee privacy incident investigations and response.
• Lead privacy program initiatives and governance efforts.
• Draft and maintain privacy policies and incident remediation documentation.
• Collaborate with cross-functional teams to ensure compliance and data protection.

Skills

Privacy leadership

HIPAA compliance

Privacy incident response

Data protection principles

Cross-functional collaboration

Communication skills

People management

Privacy certifications

Regulatory risk management

Education

Bachelor’s Degree or equivalent experience

Tools

Microsoft Office Suite

Job description

CVS Health, through its Aetna COE, seeks a Senior Manager of Technology, Data, Privacy, and Third-Party Risk Legal Services to oversee privacy incident response and governance. You will work with cross-functional teams to enforce data protection standards and respond to data breaches while maintaining HIPAA and state privacy compliance.

The role emphasizes policy development, investigations, and collaboration across departments to ensure a robust privacy program and regulatory adherence.