Data Governance, Risk & Privacy, Senior Manager

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Serves as a senior governance operator responsible for day-to-day execution of the enterprise Data Governance, Risk, and Privacy program, translating strategy into disciplined, repeatable operational practices.

This role partners closely with governance leadership to operationalize frameworks, manage program activities, enforce controls, and drive execution against governance priorities, ensuring compliant, secure, and responsible data use across business domains.

The Sr. Manager applies strong program management, financial, and operational planning capabilities to maintain governance program health, drive KPIs, and deliver audit-defensible outcomes, while continuously improving processes and enabling scalable governance practices aligned to regulatory expectations (e.g., HIPAA, CMS) and enterprise standards.

7+ years of experience in healthcare, data governance, privacy, risk management, or a related field
• Deep knowledge of healthcare regulations, including HIPAA, CMS requirements, and state privacy laws
• Experience with data governance frameworks, data lineage, metadata management, and stewardship practices
• Strong understanding of payer operations, including claims, utilization management, risk adjustment, and STARS
• Expertise in risk identification, assessment, mitigation planning, control design, and reporting
• Ability to translate legal and regulatory requirements into operational and technical processes
• Strong stakeholder management, executive communication, and cross-functional collaboration skills
• Ability to influence leaders and drive alignment across functions and throughout the enterprise
• Experience defining and operationalizing risk mitigation strategies and governance solutions

Degree in legal studies, privacy engineering, information technology, or a related discipline.
• Experience with AI governance, bias oversight, or emerging technology risk management
• Understanding of clinical data, EMRs, HIEs, and health information exchange practices
• Privacy certifications such as CIPM or CIPP
• Risk management certifications such as CRISC, PMI-RMP, or COSO ERM familiarity
• Familiarity with enterprise or solution architecture concepts
• Lean Six Sigma or other process improvement experience
• Experience supporting governance committees, decision forums, or enterprise control processes
• Familiarity with data governance tools, data catalogs, metadata platforms, or control documentation repositories
• Experience preparing documentation, evidence, or responses for audits, compliance reviews, or regulatory inquiries
• Experience assessing third-party data sharing arrangements, contractual controls, and downstream data use considerations
• Experience with issue management, remediation planning, and control monitoring in a regulated environment

·         Bachelor’s degree required, with a strong preference for degrees in Business Administration, Health Administration, or a equiv. work experience.

The typical pay range for this role is: