Analyst, Information Governance and Privacy

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues - caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.Position Summary

CVS Health is seeking a proactive and detail-oriented Privacy Compliance Specialist to support our enterprise privacy program. In this role, you will lead privacy incident investigations, respond to privacy-related inquiries from business units, and coordinate with legal teams to ensure compliance with applicable privacy laws and regulations. You will also manage workflows in our incident management system (Radar) and collaborate across departments to promote a culture of privacy awareness and accountability.Key Responsibilities

• Conduct thorough investigations of privacy incidents and document findings.
• Respond to privacy-related questions from various business units.
• Coordinate with legal counsel to obtain privacy guidance as needed.
• Manage and maintain the Radar incident management workflow.
• Communicate effectively with stakeholders at all levels of the organization.
• Work independently to prioritize tasks and manage multiple high-impact projects simultaneously.

• 2+ years of experience in privacy, compliance, or data protection roles.
• Strong working knowledge of key privacy regulations, including HIPAA, GDPR, and CCPA.
• Demonstrated ability to manage privacy incidents and apply regulatory requirements in real-world scenarios.
• Excellent written and verbal communication skills.
• Ability to work independently and manage competing priorities.
• Self-motivated with a strong sense of ownership and accountability.
• Analytical mindset with the ability to assess complex situations and recommend effective solutions.

• Completion of or willingness to obtain a privacy certification such as CIPP, CIPM, or CIPT within the first year of employment.
• Prior training or coursework in privacy, data protection, or information governance.
• Experience using privacy incident management tools, especially Radar.
• Familiarity with CVS Health's business model or healthcare industry operations.

• Bachelor's degree required, or equivalent combination of education and relevant experience.

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.
• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.
• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.