Executive Director of Data Protection and Privacy

We’re building a world of health around every individual , shaping a more connected, convenient and compassionate health experience.

We are seeking a highly experienced and strategic Executive Director of Data Protection and Privacy to own and mature the enterprise data protection program.

Key Responsibilities

• Define and drive the enterprise Data Protection and Privacy strategy, roadmap, and multi-year investment plan, aligning with business, legal, and regulatory priorities.
• Own the design, deployment, and continuous tuning of enterprise DLP controls across endpoint, network, email, cloud, and SaaS channels to prevent unauthorized exfiltration of sensitive data.
• Lead enterprise-wide data discovery efforts to identify, inventory, and map sensitive and regulated data across structured, unstructured, and cloud data stores.
• Establish and operationalize data classification standards, taxonomy, and labeling schemes, ensuring consistent application across systems, applications, and third-party platforms.
• Partner with engineering and application teams to embed privacy-by-design and privacy-enhancing technologies directly into data pipelines, platforms, and AI/ML workflows.
• Ensure the data protection program aligns with HIPAA, GDPR, CCPA/CPRA, and other applicable state and federal privacy regulations.
• Partner with Detection Engineering and Incident Response to build and refine use cases for detecting data exfiltration, insider risk, and unauthorized data movement.
• Establish metrics, KPIs, and executive reporting to measure the maturity and effectiveness of the data protection program.
• Build, mentor, and scale a high-performing team of data protection and privacy engineers and analysts.

Required Work Experience

• Minimum of 15+ years of experience in data protection, data privacy, or information security, with at least 5 years in a senior leadership or executive-level role.
• Proven experience designing, building, and operationalizing enterprise DLP programs across endpoint, network, email, and cloud/SaaS environments.
• Demonstrated experience leading enterprise data discovery initiatives, including identifying and inventorying sensitive data across structured and unstructured stores.

Preferred Work Experience

• Experience within a large, highly regulated healthcare, insurance, or financial services organization.
• Experience integrating data protection and privacy controls into cloud-native and AI/ML environments.
• Experience with data security posture management and modern data governance platforms.

Professional Certifications

• Certified Information Privacy Professional (CIPP) – preferred.
• Certified Information Privacy Manager (CIPM) – preferred.
• Certified Data Privacy Solutions Engineer (CDPSE) – preferred.

Educational Credentials

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Law, or a related field.
• Master's degree or JD preferred.

Skills and Attributes

• In-depth technical expertise in data protection, DLP, data classification, and privacy engineering concepts and technologies.
• Strong executive communication skills, with the ability to translate complex data risk concepts for both technical and non-technical stakeholders.
• Proven ability to influence without direct authority, building consensus among stakeholders with competing priorities.

Pay Range

$175,100.00 - $334,750.00