Senior Manager - Aetna Interoperability Data Governance

CVS Health•Hartford, CT

About The Position

Serves as a senior governance operator responsible for day-to-day execution of the enterprise Data Governance, Risk, and Privacy program, translating strategy into disciplined, repeatable operational practices. This role partners closely with governance leadership to operationalize frameworks, manage program activities, enforce controls, and drive execution against governance priorities, ensuring compliant, secure, and responsible data use across business domains. The Sr. Manager applies strong program management, financial, and operational planning capabilities to maintain governance program health, drive KPIs, and deliver audit-defensible outcomes, while continuously improving processes and enabling scalable governance practices aligned to regulatory expectations (e.g., HIPAA, CMS) and enterprise standards.

Requirements

7+ years of experience in healthcare, data governance, privacy, risk management, or a related field
Deep knowledge of healthcare regulations, including HIPAA, CMS requirements, and state privacy laws
Experience with data governance frameworks, data lineage, metadata management, and stewardship practices
Strong understanding of payer operations, including claims, utilization management, risk adjustment, and STARS
Expertise in risk identification, assessment, mitigation planning, control design, and reporting
Ability to translate legal and regulatory requirements into operational and technical processes
Strong stakeholder management, executive communication, and cross-functional collaboration skills
Ability to influence leaders and drive alignment across functions and throughout the enterprise
Experience defining and operationalizing risk mitigation strategies and governance solutions
Bachelor’s degree required, with a strong preference for degrees in Business Administration, Health Administration, or equivalent work experience.

Nice To Haves

Degree in legal studies, privacy engineering, information technology, or a related discipline.
Experience with AI governance, bias oversight, or emerging technology risk management
Understanding of clinical data, EMRs, HIEs, and health information exchange practices
Privacy certifications such as CIPM or CIPP
Risk management certifications such as CRISC, PMI-RMP, or COSO ERM familiarity
Familiarity with enterprise or solution architecture concepts
Lean Six Sigma or other process improvement experience
Experience supporting governance committees, decision forums, or enterprise control processes
Familiarity with data governance tools, data catalogs, metadata platforms, or control documentation repositories
Experience preparing documentation, evidence, or responses for audits, compliance reviews, or regulatory inquiries
Experience assessing third-party data sharing arrangements, contractual controls, and downstream data use considerations
Experience with issue management, remediation planning, and control monitoring in a regulated environment

Responsibilities

Day-to-day execution of the enterprise Data Governance, Risk, and Privacy program.
Translating strategy into disciplined, repeatable operational practices.
Partnering closely with governance leadership to operationalize frameworks.
Managing program activities.
Enforcing controls.
Driving execution against governance priorities.
Ensuring compliant, secure, and responsible data use across business domains.
Applying program management, financial, and operational planning capabilities to maintain governance program health.
Driving KPIs.
Delivering audit-defensible outcomes.
Continuously improving processes.
Enabling scalable governance practices aligned to regulatory expectations and enterprise standards.