Director Data Security

Health Care Service Corporation•Chicago, IL

20h•$133,400 - $247,700•Hybrid

About The Position

The Director of Data Security is accountable for establishing, leading, and continuously improving HCSC’s enterprise data security program. The role will build the strategy, operating model, governance, capabilities, and team needed to identify, classify, protect, monitor, and govern sensitive data across on-premises, cloud, SaaS, and AI-enabled environments. The position requires a proven data security practitioner who has built or materially transformed enterprise data security programs, can lead and develop people, and can translate data risk into clear business priorities and investment decisions. This is a hybrid role based in Chicago, Illinois, or Richardson, Texas. Flex employees are expected to work in the office at least three days per week. Sponsorship is not available, including for candidates currently on OPT.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field and at least 10 years of relevant experience, or equivalent practical experience.
At least 5 years of people leadership experience, including hiring, coaching, performance management, organizational development, and leading teams through change.
Demonstrated experience establishing, scaling, or materially transforming an enterprise data security program, with direct ownership of strategy, roadmap, governance, operating model, and measurable outcomes.
Deep expertise in data security and protection, including data discovery and classification, Data Loss Prevention, data access governance, data security posture management, encryption, data integrity, and monitoring and response.
Experience implementing and operating data security controls across cloud, SaaS, on-premises, and hybrid environments.
Working knowledge of AI and machine learning concepts and related data security risks, including generative AI, large language models, data leakage, protection of training and grounding data, prompt and output handling, and third-party AI services.
Demonstrated ability to translate technical and regulatory data risks into business-relevant priorities, decisions, roadmaps, and investment requirements.
Experience leading cross-functional initiatives and influencing senior technology, risk, legal, privacy, compliance, and business stakeholders.
Experience managing budgets, strategic vendors, and technology portfolios.

Nice To Haves

Experience building a data security function or leading a major enterprise data security transformation in a complex or highly regulated organization.
Experience defining data security controls for AI platforms, generative AI solutions, machine learning pipelines, data science environments, or AI-enabled applications.
Familiarity with major cloud and data platforms and their native data protection capabilities.
Knowledge of relevant frameworks, regulations, and standards related to data protection, privacy, cybersecurity, and AI governance.
Relevant certifications such as CISSP, CISM, CCSP, CDPSE, or comparable credentials.

Responsibilities

Establish, lead, and continuously improve the enterprise data security program.
Build the data security strategy, roadmap, operating model, governance, capabilities, and team.
Identify, classify, protect, monitor, and govern sensitive data across on-premises, cloud, SaaS, and AI-enabled environments.
Lead and develop employees, including hiring, coaching, performance management, and organizational development.
Translate technical and regulatory data risks into business priorities, decisions, roadmaps, and investment requirements.
Lead cross-functional initiatives and influence technology, risk, legal, privacy, compliance, and business stakeholders.
Manage budgets, strategic vendors, and technology portfolios.