Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver.

Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

Position Summary

The Senior Manager of Data Discovery and Classification lead is a critical member of the Data Integrity Services team. This position requires a visionary leader with a strong technical background and a deep understanding of advanced technologies to discover, classify, and protect data across various platforms and environments. The ideal candidate will have the ability to lead a team in implementing innovative tools and processes for classification driven end-to-end protection of data lifecycle. This role will collaborate with data security, privacy, compliance, ransomware protection, data vaulting and recovery program leads to align data security efforts with organizational goals.

• Lead a team of Data Discovery and Classification specialists in identifying and categorizing sensitive data across various data repositories and environments.
• Collaborate with cross-functional teams including, IT, infrastructure, data governance, data backup and recovery, legal, compliance and business units to ensure alignment of data classification efforts with organizational goals.
• Conduct regular assessment and reviews to monitor the effectiveness of data discovery and classification capabilities, policies, and controls.
• Stay informed about emerging trends, technologies, and regulations related to data discovery classification and privacy to continuously improve the maturity of the data security program.
• Develop and communicate vision and strategy for data discovery products aligned with overall business goals, industry trends and business practices.
• Decision-maker and primary point of contact for the data discovery product roadmap. Define and prioritize features based on business priorities and customer needs.
• Partner with stakeholders to gather and document detailed product requirements, and to drive product development from concept to launch. Evaluate and recommend data discovery and classification tools, technologies, and methodologies.
• Support data protection audit, compliance, regulatory, client assurance, and third-party assessment projects.
• Provide technical guidance and mentorship to team members, ensuring high-quality deliverables and adherence to security best practices.
• Manage the sequencing and timing of project delivery with technology leadership, product, and engineering teams.
• Lead development and maintenance of data discovery dashboard, metrics roadmap, and scorecards.

• 7+ years of steady career progression with information security work experience
• 5+ years of proven experience with data discovery and classification driven security controls.
• 5+ years of experience in leading data discovery and classification frameworks and tools.
• 5+ years of recent personnel management experience with oversight of five or more direct reports.
• 5+ years of leadership and communication skills with the ability to influence stakeholders at all levels of the organization.
• 5+ years of experience with security controls alignment to key regulations like NIST, FIPS 140-2, ISO, HITRUST, HIPAA, PCI, CCPA, GDPR

• Strong knowledge of data protection techniques and best practices.
• Experience with security solutions for data labeling, data loss prevention, encryption, data governance, data backup and recovery.
• Industry certifications from PMI, ISC2, SANS, ISACA, IAPP or equivalent.
• Knowledge of data security and privacy regulatory compliance, frameworks and standards such as PCI, HIPAA, NIST, FIPS 140-2, GDPR, CCPA.
• Ability to manage a high degree of complexity and distill information that provides clear direction.
• Ability to motivate others with high expectations to facilitate impact and pace of change.
• Agility to deal with a constantly changing business environments.
• Comfortable operating within areas of ambiguity to iterate and make progress in a consistent manner.
• Foster collaborative decision-making processes that deliver results and exceed expectations.