At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers., The Director of Data Security is accountable for establishing, leading, and continuously improving the enterprise data security program. This leader will build the strategy, operating model, governance, capabilities, and team needed to identify, classify, protect, monitor, and govern sensitive data across on-premises, cloud, SaaS, and AI-enabled environments. The role requires a proven data security practitioner who has built or materially transformed enterprise data security programs, can lead and develop people, and can translate data risk into clear business priorities and investment decisions.

Information/Data Security (InfoSec), Information/Data Security (InfoSec), Continuous Improvement, Software as a Service (SaaS), Artificial Intelligence (AI), Cloud Computing, Risk, Enterprise Protection, Information Technology & Information Systems, Computer Science, * Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field and at least 10 years of relevant experience, or equivalent practical experience.

• At least 5 years of people leadership experience, including hiring, coaching, performance management, organizational development, and leading teams through change.

• Demonstrated experience establishing, scaling, or materially transforming an enterprise data security program, with direct ownership of strategy, roadmap, governance, operating model, and measurable outcomes.

• Deep expertise in data security and protection, including data discovery and classification, Data Loss Prevention, data access governance, data security posture management, encryption, data integrity, and monitoring and response.

• Experience implementing and operating data security controls across cloud, SaaS, on-premises, and hybrid environments.

• Working knowledge of AI and machine learning concepts and associated data security risks, including generative AI, large language models, data leakage, training and grounding data protection, prompt and output handling, and third-party AI services.

• Demonstrated ability to translate technical and regulatory data risks into business-relevant priorities, decisions, roadmaps, and investment requirements.

• Experience leading cross-functional initiatives and influencing senior technology, risk, legal, privacy, compliance, and business stakeholders.

• Experience managing budgets, strategic vendors, and technology portfolios., * Experience building a data security function or leading a major enterprise data security transformation in a complex or highly regulated organization.

• Experience defining data security controls for AI platforms, generative AI solutions, machine learning pipelines, data science environments, or AI-enabled applications.

• Familiarity with major cloud and data platforms and their native data protection capabilities.

• Knowledge of relevant frameworks, regulations, and standards related to data protection, privacy, cybersecurity, and AI governance.

• Relevant certifications such as CISSP, CISM, CCSP, CDPSE, or comparable credentials

LI-BS1

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting https://careers.hcsc.com/totalrewards.

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan.

Flex employees are expected to be in the office a minimum of three days a week. Management will have discretion to modify an employee’s weekly schedule for exigent circumstances.

Are you being referred to one of our roles? If so, ask your connection at HCSC about our Employee Referral process!