Data Security Sr Technical Program Manager

How you can make a difference

We are seeking a highly skilled and technically proficient Senior Data Security Technical Program Manager to lead our enterprise-wide Data Security Program. This role is ideal for a former security engineer with strong program and product management capabilities, who thrives in cross-functional environments and is passionate about protecting sensitive data across complex ecosystems.

What you will do (Job Duties & Responsibilities)

Lead and own the Data Security Program, including the development and enforcement of data security standards.
• Oversee sensitive data discovery, access management, protection (at rest, in transit, in use), key management lifecycle, and availability through immutable data backups.
• Collaborate with Product, Technology, IT, data governance, legal, privacy, and business stakeholders.
• Working with data governance and privacy teams to build the sensitive data lineage across the applications and HealthEquity ecosystem. This lineage will help drive data retention, and protection functions.
• Serve as the primary liaison for service delivery, standards alignment, and stakeholder engagement.
• Implement cryptographic techniques such as encryption, tokenization, hashing, and key management.
• Apply data security controls across structured and unstructured environments.
• Evaluate, select, and manage vendors for data discovery, access management, protection, and backup solutions (e.g., Securiti.ai, Rubrik, Microsoft Purview).
• Manage multiple concurrent projects related to standards, discovery, access, protection, and backups.
• Track metrics, enforce schedules, triage issues, and provide executive-level reporting.
• Assess current tools and data environments.
• Deploy new technologies and measure the effectiveness of controls and processes.
• Identify and address gaps such as unprotected data, unclear retention policies, and excessive data storage.
• Partner with governance teams to optimize data retention and protection strategies.
• Ensure compliance and effective communication with legal, privacy, technology, and business teams.
• Drive successful program delivery through proactive engagement and collaboration.

What you will need to be successful (Skills, Knowledge, & Experience)

• Regulatory Expertise: Strong knowledge of PCI DSS and HIPAA requirements, with experience implementing and managing controls, audits, and compliance programs.

• Security & Risk Management: Skilled in information security principles, risk assessments, vulnerability management, and use of security tools (e.g., vulnerability scanners, SIEM systems).

• Professional Experience: 7+ years in data security, technical program management, or related roles; prior experience as a Security Engineer moving into program/product management.

• Technical Skills: Proficient in cryptography, format-preserving encryption/tokenization, enterprise security controls, and tools/platforms like Securiti.ai, Rubrik, and Microsoft Purview.

• Leadership: Proven success managing complex, cross-functional initiatives, with excellent communication, stakeholder management, and leadership skills.

• Education: Bachelor's degree in Computer Science, Information Security, Engineering, or related field preferred.

#LI-Remote

This is a remote position.

Why work with HealthEquity

HealthEquity has a vision that by2030 we will make HSAs as wide-spread and popular as retirement accounts. We are passionate about providing a solution that allows American families to connect health and wealth. Join us and discover a work experience where the person is valued more than the position. Click here to learn more.

You belong at HealthEquity!

HealthEquity, Inc. is an equal opportunity employer, and we are committed to being an employer where no matter your background or identity - you feel welcome and included. We ensure equal opportunity for all applicants and employees without regard to race, age, color, religion, sex, sexual orientation, gender identity, national origin, status as a qualified individual with a disability, veteran status, or other legally protected characteristics. HealthEquity is a drug-free workplace. For more information about our EEO policy, or about HealthEquity's applicant disability accommodation, drug-free-workplace, background check, and E-Verify policies, please visit our Careers page.

HealthEquity uses Microsoft Copilot to transcribe screening interviews between candidates and their direct Talent Partner for note taking and interview summaries. By scheduling a screening interview with us, you consent to Microsoft Copilot's AI technology recording and transcribing your interview with your Talent Partner. This information will be reviewed for accuracy and then used by HealthEquity to summarize the interview, ensure accuracy, and facilitate our hiring process. We take privacy seriously. You have the option to opt out. If you wish to opt out of this Microsoft Copilot transcription, please notify your Talent Partner in advance of the interview. If we do not receive an opt-out request from you, we will assume that you consent to the use of Microsoft Copilot.

At HealthEquity, our goal is to save and improve lives by empowering healthcare consumers. This shared purpose inspires everything we do, including how we approach hiring. Our process is designed to get to know the real you: your skills, experiences, and potential to make a difference. We value honesty, originality, and the courage to do the right thing, even when it is not the easiest path. Showing up as your authentic self reflects these values and helps us build something truly remarkable together.

As AI is becoming a common tool throughout the application process, we want to be clear about its appropriate use at HealthEquity. Using AI to support resume writing, research, or interview preparation is perfectly acceptable, provided the content is accurate and genuinely represents your qualifications and skills. For other key parts of our interview process, however, it is important that the ideas, communication, and work you share reflect your own voice, experiences, and thinking. We ask that you participate in our live interviews and complete any assessments without AI assistance unless instructions explicitly indicate otherwise or a specific exception is discussed and approved in advance. This approach ensures fairness, celebrates your individuality, and allows your authentic perspective to shine. Behaviors that do not align with these guidelines may result in disqualification from the hiring process or termination of employment if later discovered. We appreciate your understanding and look forward to learning about the unique contributions only you can bring to HealthEquity.

HealthEquity is committed to your privacy as an applicant for employment. For information on our privacy policies and practices, please visit HealthEquity Privacy.