Executive Director, Data Protection, Privacy

CVS Health Careers

. Define and drive the enterprise Data Protection and Privacy strategy, roadmap, and multi-year investment plan .

Posted 11/2/2026full-timeScottsdale • Arizona • United StatesLead💰 $175,100 - $334,750 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Data Protection and Privacy, including the design and operationalization of DLP programs, compliance with HIPAA and GDPR, and the ability to lead cross-functional teams in a highly regulated environment. Proven track record in building and mentoring high-performing teams while advising executive leadership on emerging data risks.

Highest-signal resume keywords

Data Protection Strategy DevelopmentEnterprise DLP Program DesignHIPAA, GDPR, CCPA/CPRA ComplianceData Classification Standards EstablishmentExecutive Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Loss Prevention (DLP)Data ClassificationEncryptionTokenizationData MaskingAnonymizationData Discovery InitiativesIncident ResponseData GovernancePrivacy Engineering

Soft Skills

Problem-SolvingInfluencing Without AuthorityBuilding ConsensusMentoringTeam Building

Tools & Technologies

AWSAzureGCPCloud-Native EnvironmentsAI/ML WorkflowsDSPM Platforms

Certifications & Qualifications

CIPPCIPMCDPSE

Industry Keywords

Data ProtectionData PrivacyInformation SecurityHealthcareInsuranceFinancial ServicesRegulated Environments

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Define and drive the enterprise Data Protection and Privacy strategy, roadmap, and multi-year investment plan
Own the design, deployment, and continuous tuning of DLP controls across endpoint, network, email, cloud, and SaaS channels
Lead enterprise-wide discovery to identify, inventory, and map sensitive and regulated data
Establish and operationalize data classification standards, taxonomy, and labeling schemes
Embed privacy-by-design and privacy-enhancing technologies into data pipelines, platforms, and AI/ML workflows
Align the data protection program with HIPAA, GDPR, CCPA/CPRA, and other applicable regulations
Partner with Legal and Compliance on data subject requests, breach notifications, and audits
Build and refine data exfiltration, insider risk, and unauthorized data movement detection use cases
Lead data-related incident response and forensics as needed
Establish metrics, KPIs, and executive reporting for program maturity and effectiveness
Present regularly to senior leadership and risk committees
Build, mentor, and scale a high-performing data protection and privacy team
Advise executive leadership, Legal, Internal Audit, and business stakeholders on emerging data risks
Continuously evolve the program for new data types, platforms, threats, and business models

Requirements

What you’ll need

Minimum of 15+ years of experience in data protection, data privacy, or information security
At least 5 years in a senior leadership or executive-level role
Experience designing, building, and operationalizing enterprise DLP programs across endpoint, network, email, and cloud/SaaS environments
Experience leading enterprise data discovery initiatives across structured and unstructured data stores
Experience establishing data classification standards and taxonomy
Hands-on experience with encryption, tokenization, data masking, and anonymization
Strong working knowledge of HIPAA, GDPR, CCPA/CPRA, and applicable state privacy laws
Experience leading cross-functional teams and enterprise data protection programs
Experience advising boards and executive stakeholders on data protection and privacy risk
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Law, or a related field
Experience within a large, highly regulated healthcare, insurance, or financial services organization preferred
Experience with AWS, Azure, or GCP in cloud-native and AI/ML environments preferred
Experience with DSPM and modern data governance platforms preferred
Experience building or maturing an insider risk management program preferred
CIPP, CIPM, and CDPSE certifications preferred
In-depth expertise in data protection, DLP, data classification, and privacy engineering
Strong executive communication and problem-solving skills
Ability to influence without direct authority and build consensus
Experience building, mentoring, and scaling technical teams

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being
CVS Health bonus, commission or short-term incentive program
Equity award program