Senior Manager, Information Governance and Privacy

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

The Senior Manager, Information Governance and Privacy plays a critical leadership role in managing privacy operations and technology solutions that safeguard sensitive data across the enterprise. This position within our Pharmacy and Consumer Wellness (PCW) team applies in-depth knowledge to ensure compliance with data protection laws, regulations, and policies, and also conducts privacy risk assessments, reviews and drafts privacy policies. This individual collaborates with cross-functional teams to implement privacy programs, responds to data breaches, and ensures compliance with privacy, security, and data governance standards.

• Lead Technology & Control Operations: Oversee teams managing privacy tools and platforms such as Radar Incident Management, Archer, One Trust, Tableau, and SharePoint. Drive system enhancements and backlog prioritization to optimize operational workflows.
• Governance &
  
  Risk Management:
  
  Collaborate with Legal, IT, Assurance, Compliance, Enterprise Information Security, and Internal Audit to identify privacy risks, ensure adherence to regulatory requirements, and implement remediation strategies.
• Operational Excellence: Serve as a thought leader on metrics, reporting, and process improvements. Develop and maintain privacy operations processes, including incident response and breach assessments under HIPAA and state laws.
• Team Development: Manage and mentor team members, fostering a culture of accountability, collaboration, and continuous improvement; set clear performance expectations and conduct regular evaluations.
• Incident and Breach Response: Lead a team of privacy compliance professionals responsible for handling privacy incidents/investigations, complaints, and providing advisory support to Retail Pharmacy Consumer Wellness business partners; ensure compliance with federal and state privacy laws, including incident reporting and breach documentation; review complex cases to ensure risk assessment, findings, and mitigation measures are appropriately documented.
• Privacy Compliance: Lead privacy compliance initiatives for retail pharmacy operations, managing a centralized repository of policies, job aids, and best practices to support pharmacy teams; provide guidance and resources to ensure proper handling and reporting of authorized disclosures and privacy incidents; partner with Pharmacy Operations to promote privacy awareness, facilitate cross-training, and implement robust physical, technical, and administrative safeguards across stores.

• 7+ years of experience in privacy, information governance, or related fields with:
• Strong knowledge of privacy laws, security standards, and data governance frameworks.
• 4+ years managing privacy tools (e.g., Archer, Radar, One Trust) and operational reporting.

• Proven ability to lead teams; adept at problem solving, decision-making, and collaboration/teamwork.
• Experience with privacy tools (e.g., Radar) and advanced Excel features.
• Familiarity with collaboration platforms (SharePoint, Teams, iManage).
• Demonstrated success in driving compliance and operational efficiency in complex organizations.

• Strategic decision-making and prioritization.
• Strong influencing and communication skills.
• Excellent attention to detail and ability to keep track of deadlines.
• Ability to balance compliance objectives with business needs.
• Commitment to fostering a responsible data culture and ethical use of emerging technologies.

Bachelor’s degree required or equivalent years of related experience.

The typical pay range for this role…