# Executive Director of Data Protection and Privacy

**Company**: CVS Health
**Location**: Scottsdale, AZ
**Experience**: executive
**Job type**: full-time
**Salary**: $175,100.00 - $334,750.00
**Category**: Security
**Industry**: Healthcare

**Apply**: https://cvshealth.wd1.myworkdayjobs.com/en-US/CVS_Health_Careers/job/AZ---Scottsdale/Executive-Director--Data-Protection---Privacy_R1062881?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9f8b288a-f97

## Description

We’re building a world of health around every individual , shaping a more connected, convenient and compassionate health experience.

We are seeking a highly experienced and strategic Executive Director of Data Protection and Privacy to own and mature the enterprise data protection program.

**Key Responsibilities**

- Define and drive the enterprise Data Protection and Privacy strategy, roadmap, and multi-year investment plan, aligning with business, legal, and regulatory priorities.

- Own the design, deployment, and continuous tuning of enterprise DLP controls across endpoint, network, email, cloud, and SaaS channels to prevent unauthorized exfiltration of sensitive data.

- Lead enterprise-wide data discovery efforts to identify, inventory, and map sensitive and regulated data across structured, unstructured, and cloud data stores.

- Establish and operationalize data classification standards, taxonomy, and labeling schemes, ensuring consistent application across systems, applications, and third-party platforms.

- Partner with engineering and application teams to embed privacy-by-design and privacy-enhancing technologies directly into data pipelines, platforms, and AI/ML workflows.

- Ensure the data protection program aligns with HIPAA, GDPR, CCPA/CPRA, and other applicable state and federal privacy regulations.

- Partner with Detection Engineering and Incident Response to build and refine use cases for detecting data exfiltration, insider risk, and unauthorized data movement.

- Establish metrics, KPIs, and executive reporting to measure the maturity and effectiveness of the data protection program.

- Build, mentor, and scale a high-performing team of data protection and privacy engineers and analysts.

**Required Work Experience**

- Minimum of 15+ years of experience in data protection, data privacy, or information security, with at least 5 years in a senior leadership or executive-level role.

- Proven experience designing, building, and operationalizing enterprise DLP programs across endpoint, network, email, and cloud/SaaS environments.

- Demonstrated experience leading enterprise data discovery initiatives, including identifying and inventorying sensitive data across structured and unstructured stores.

**Preferred Work Experience**

- Experience within a large, highly regulated healthcare, insurance, or financial services organization.

- Experience integrating data protection and privacy controls into cloud-native and AI/ML environments.

- Experience with data security posture management and modern data governance platforms.

**Professional Certifications**

- Certified Information Privacy Professional (CIPP) – preferred.

- Certified Information Privacy Manager (CIPM) – preferred.

- Certified Data Privacy Solutions Engineer (CDPSE) – preferred.

**Educational Credentials**

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Law, or a related field.

- Master's degree or JD preferred.

**Skills and Attributes**

- In-depth technical expertise in data protection, DLP, data classification, and privacy engineering concepts and technologies.

- Strong executive communication skills, with the ability to translate complex data risk concepts for both technical and non-technical stakeholders.

- Proven ability to influence without direct authority, building consensus among stakeholders with competing priorities.

**Pay Range**

$175,100.00 - $334,750.00

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- data protection
- data privacy
- information security
- DLP
- data classification
- privacy engineering

### Nice to have
- cloud-native
- AI/ML
- data security posture management
- modern data governance platforms

---

Source: [Apply at cvshealth.wd1.myworkdayjobs.com](https://cvshealth.wd1.myworkdayjobs.com/en-US/CVS_Health_Careers/job/AZ---Scottsdale/Executive-Director--Data-Protection---Privacy_R1062881?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)