Data Security Lead ( DLP​/DSPM

At Zelis, we Get Stuff Done. So, let's get to it!

Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts - driving real, measurable results for clients.

At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.

You bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.

Provides technical leadership for security engineering and operations. Drives strategic initiatives and cross-functional collaboration.

Platform & Data Security

The Senior Lead, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) & Exception Governance supports Zelis' enterprise data protection program, reporting to the Director of Data Security. This individual helps discover, classify, protect, monitor, and govern sensitive data across cloud, SaaS, endpoint, collaboration, AI-enabled, and on-premises environments.

As a senior member of the Platform & Data Security team, this role helps ensure Zelis maintains strong protection of healthcare, payment, financial, employee, customer, and corporate information assets while supporting business growth, cloud transformation, analytics initiatives, and emerging AI technologies.

The ideal candidate brings strong technical depth in DLP and DSPM technologies, along with sound judgment in governance and risk management. This individual works closely with Security, Infrastructure, Engineering, Data & Analytics, Privacy, Compliance, and Legal teams to help build and operate scalable, risk-based data protection capabilities that align with Zelis' data security objectives and regulatory obligations.

This role requires solid working knowledge of enterprise data security tools (particularly Microsoft Purview), cloud security, DSPM technologies, sensitive data discovery and classification, exception governance processes, and regulatory compliance within highly regulated environments. The successful candidate will execute day-to-day program operations, provide technical analysis of data risks, and support governance processes that enable the business while protecting critical information assets, under the direction of the Director of Data Security.

• Support day-to-day administration, tuning, and monitoring of enterprise DLP controls across endpoints, email, cloud services, SaaS applications, collaboration tools, file-sharing platforms, and emerging AI technologies.

• Help maintain DLP policies aligned with Zelis' data classification standards and regulatory requirements.

• Continuously tune DLP rules to reduce false positives and operational overhead.

• Monitor for data exfiltration risks, insider threats, and evolving attack methods impacting sensitive information, escalating issues as needed.

• Partner with Security Operations and Incident Response teams to investigate and help remediate data protection incidents.

• Support implementation and day-to-day operation of DSPM capabilities across enterprise data stores, cloud environments, SaaS applications, databases, data lakes, and analytics platforms.

• Help identify sensitive data exposure, excessive permissions, orphaned data repositories, access risks, compliance gaps, and configuration weaknesses.

• Coordinate risk remediation efforts with engineering, cloud, infrastructure, and data platform teams.

• Maintain visibility into enterprise data assets and prepare risk intelligence reporting for technology and business stakeholders.

• Contribute to reporting that provides transparency into data security posture, trends, and risk reduction progress.

• Support enterprise-wide data discovery, classification, labeling, and protection efforts.

• Help ensure sensitive data - including PHI, PII, PCI, financial, payment, employee, customer, and proprietary business…