Data Governance, Risk & Privacy, Senior Manager

Were building a world of health around every individual shaping a more connected convenient and compassionate health experience. At CVS Health youll be surrounded by passionate colleagues who care deeply innovate with purpose hold ourselvesaccountable and prioritize safety and quality in everything we do. Join us and be part of something bigger helping to simplify health care one person one family and one community at a time.

Leads and operationalizes the enterprise Data Governance Risk and Privacy program across Commercial Medicare and Medicaid lines of business. Establishes governance frameworks decision rights standards and controls that promote data quality transparency accountability and appropriate use of sensitive health information. Partners with Legal Compliance Security Informatics and business leaders to translate regulatory requirements into practical governance processes and risk-based controls ensuring compliant secure and responsible data use aligned with HIPAA CMS mandates and state privacy requirements.

Governance Framework & Program Execution

Define and operationalize governance frameworks policies standards and stewardship models

Translate enterprise strategy into program plans roadmaps and execution trackers

Establish data ownership lineage quality controls and metadata management across critical data domains

Enable audit-defensible data use aligned with TPO (Treatment Payment and Operations)

Day-to-Day Governance Operations

Execute governance workflows for data sharing access approvals and risk evaluation

Enforce data use policies including TPO-aligned use secondary use and access controls

Define controls for de-identified limited and identified datasets

Monitor downstream data handling and ensure alignment of contractual terms consent and actual data use

Risk Privacy & Compliance

Identify assess and mitigate data-related risks across sharing access and downstream use

Ensure compliance with HIPAA state privacy laws and CMS interoperability requirements

Evaluate data use cases for permissible use (TPO non-TPO secondary use)

Assess vendor and third-party data sharing risks and control requirements

Support audits compliance reviews and regulatory inquiries with governance documentation

KPI Management & Reporting

Define and track governance KPIs and operational metrics

Develop executive-ready dashboards and visualizations for governance performance and risk trends

Cross-Functional Leadership

Serve as subject matter expert for data use governance and regulatory alignment

Lead governance forums and working groups to drive decision-making and accountability

Enable knowledge sharing training and capability uplift across governance practitioners

Enable scalable reusable governance processes across programs and business functions

Documented governance frameworks policies standards and stewardship models

Governance program plans roadmaps and execution trackers

Enterprise data lineage metadata and approved data use inventories

Risk assessments risk logs and mitigation plans

TPO-aligned data use decisions with supporting rationale and approvals

KPI dashboards and governance performance reporting

Audit-ready governance documentation and evidence

7 years in healthcare data governance privacy risk management or a related field

Deep knowledge of HIPAA CMS requirements and state privacy laws

Experience with data governance frameworks data lineage metadata management and stewardship practices

Strong understanding of payer operations (claims utilization management risk adjustment STARS)

Expertise in risk identification assessment mitigation planning control design and reporting

Ability to translate legal and regulatory requirements into operational and technical processes

Strong stakeholder management executive communication and cross-functional collaboration skills

Ability to influence leaders and drive alignment across the enterprise

Strong program management financial and operational planning capabilities

Degree in legal studies privacy engineering information technology or a related discipline

Experience with AI governance bias oversight or emerging technology risk management

Understanding of clinical data EMRs HIEs and health information exchange practices

Privacy certifications (CIPM CIPP) or risk management certifications (CRISC PMI-RMP COSO ERM)

Familiarity with enterprise or solution architecture concepts

Lean Six Sigma or other process improvement experience

Experience with data governance tools data catalogs or metadata platforms

Experience assessing third-party data sharing arrangements and downstream data use

Experience with issue management remediation planning and control monitoring in a regulated environment

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience education geography and other relevant factors. This position is eligible for a CVS Health bonus commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the companys equity award program.

Our people fuel our future. Our teams reflect the customers patients members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.

Additional details about available benefits are provided during the application process and on Benefits Moments.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal state and local laws.