Strategic Leader, Data Protection & Privacy

9025 CVS Shared Services Resources LLC; Scottsdale (AZ); On-site; USD 175,000 - 335,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Other resources

Job summary

CVS Health is seeking an Executive Director of Data Protection and Privacy to own the enterprise data protection program and mature its controls for sensitive and member data across the organization. This role requires executive presence to engage senior leaders, legal and compliance, and business stakeholders on data risk.

The position leads strategy, architecture, and operational execution for DLP, data discovery, and classification, while aligning with HIPAA, GDPR, CCPA/CPRA and state privacy

Qualifications

• 15+ years in data protection, privacy or info security.
• 5+ years in senior leadership/executive roles.
• Experience with HIPAA, GDPR, CCPA/CPRA and state laws.

Responsibilities

• Define and drive enterprise Data Protection & Privacy strategy and roadmap.
• Own DLP design, deployment, and tuning across endpoints, network, cloud, and SaaS.
• Lead data discovery to inventory sensitive data across stores.
• Establish data classification standards and taxonomy.
• Partner with engineering to embed privacy-by-design in pipelines and AI/ML workflows.
• Ensure regulatory alignment and manage data subject requests, breaches, audits.

Skills

Data protection

DLP

Data discovery

Data classification

Privacy engineering

Executive communication

Leadership

Education

BSc in CS/IT

Master's degree preferred

Job description

CVS Health is seeking an Executive Director of Data Protection and Privacy to own the enterprise data protection program and mature its controls for sensitive and member data across the organization. This role requires executive presence to engage senior leaders, legal and compliance, and business stakeholders on data risk.

The position leads strategy, architecture, and operational execution for DLP, data discovery, and classification, while aligning with HIPAA, GDPR, CCPA/CPRA and state privacy