R1054567 Senior Analyst, IT Compliance & Risk - Data Protection

About the role

We're building a world of health around every individual - shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger - helping to simplify health care one person, one family and one community at a time.

The Corporate Functions & PCW IT Compliance Team is looking for a resource to become our Data Protection Domain SME, focusing on information classification, data obfuscation, encryption, and data security controls and governance. This person will help our team build-out, maintain, and continuously improve upon the support framework for Data Protection. He or she will serve as a key player in our day-to-day operations, navigate the Compliance workload and emerging priorities, and provide front-line support for our application teams, ensuring compliance with data privacy and protection policies, industry regulations, and any contractual obligations.

Responsibilities

• Develop and implement data security governance framework that aligns with industry best practices, regulatory requirements, and company policies.
• Guide and assist application teams with identifying data protection gaps and developing remedial action plans for non-conformance to policy requirements.
• Assess and interpret IT policies and control standards for system and operational compliance.
• Maintain key files and relevant data sources for compliance governance and reporting, including operational metrics. This includes maintaining data quality, consistency, and integrity.
• Assist with compilation and maintenance of process documentation, job-aids, FAQs, and other support-related materials for our application teams.
• Promote industry best practices for Data Privacy and Protection, ensuring compliance with relevant regulations and standards such as PCI, SOX, HIPAA, HiTrust, NIST, and others.
• Stay updated on industry trends, emerging data security and privacy engineering technologies, and security threats to continuously improve and evolve data protection strategy and solutions