At Zelis, we Get Stuff Done. So, let’s get to it!

A Little About Us

Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.

At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.

A Little About You

You bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.

Position Overview

Provides technical leadership for security engineering and operations. Drives strategic initiatives and cross-functional collaboration.

Data Security Lead,(DLP/DSPM)

Platform & Data Security

Position Overview

The Senior Lead, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) & Exception Governance supports Zelis’ enterprise data protection program, reporting to the Director of Data Security. This individual helps discover, classify, protect,monitor, and govern sensitive data across cloud, SaaS, endpoint, collaboration, AI-enabled, and on-premises environments.

As a senior member of the Platform & Data Security team, this role helps ensure Zelismaintains strong protection of healthcare, payment, financial, employee, customer, and corporate information assets while supporting business growth, cloud transformation, analytics initiatives, and emerging AI technologies.

The ideal candidate brings strong technical depth in DLP and DSPM technologies, along with sound judgment in governance and risk management. This individual works closely with Security, Infrastructure, Engineering, Data & Analytics, Privacy, Compliance, and Legal teams to help build andoperate scalable, risk-based data protection capabilities that align with Zelis’ data securityobjectives and regulatory obligations.

This role requires solid working knowledge of enterprise data security tools (particularly Microsoft Purview), cloud security, DSPM technologies, sensitive data discovery and classification, exception governance processes, and regulatory compliance within highly regulated environments. The successful candidate will execute day-to-day program operations, provide technical analysis of data risks, and support governance processes that enable the business while protecting critical information assets, under the direction of the Director of Data Security.

Key Responsibilities

Data Loss Prevention (DLP)

Support day-to-day administration, tuning, and monitoring of enterprise DLP controls across endpoints, email, cloud services, SaaS applications, collaboration tools, file-sharing platforms, and emerging AI technologies.

Help maintain DLP policies aligned with Zelis’ data classification standards and regulatory requirements.

Continuously tune DLP rules to reduce false positives and operational overhead.

Monitor for data exfiltration risks, insider threats, and evolving attack methodsimpacting sensitive information, escalating issues as needed.

Partner with Security Operations and Incident Response teams to investigate and help remediate data protection incidents.

Data Security Posture Management (DSPM)

Support implementation and day-to-day operation of DSPM capabilities across enterprise data stores, cloud environments, SaaS applications, databases, data lakes, and analytics platforms.

Helpidentify sensitive data exposure, excessive permissions, orphaned data repositories, access risks, compliance gaps, and configuration weaknesses.

Coordinate risk remediation efforts with engineering, cloud, infrastructure, and data platform teams.

Maintain visibility into enterprise data assets and prepare risk intelligence reporting for technology and business stakeholders.

Contribute to reporting that provides transparency into data security posture, trends, and risk reduction progress.

Data Discovery, Classification & Governance

Support enterprise-wide data discovery, classification, labeling, and protection efforts.

Help ensure sensitive data — including PHI, PII, PCI, financial, payment, employee, customer, and proprietary business information — is accuratelyidentified and protected.

Collaborate with Data Governance, Privacy, Legal, and Compliance teams on data governance initiatives.

Support data lifecycle management, retention, minimization, archival, and secure disposal activities.

Help drive consistent application of data protection standards across cloud and on-premises environments.

Security Exception Governance

Administer the security exception governance process, with primary responsibility for data protection and security control exceptions.

Supportexception intake, review, tracking, renewal, escalation, and closure activities.

Conduct risk-based assessments of security exceptions and evaluate the adequacy of compensating controls.

Coordinate cross-functional exception review meetings.

Maintain inventories of approved exceptions and associated businessrisk.

Prepare reporting on exception trends, aging, recurring risk patterns, and remediation progress for leadership review.

Follow up on long-term or high-risk exceptions to help drivetimely remediation.

Risk Management & Compliance

Support security and risk assessments fornew technologies, cloud services, and business initiatives involving sensitive data.

Help translate business, regulatory, and compliance requirements into practical security controls and governance processes.

Partner with Internal Audit, Compliance, Privacy, and Legal teams to support audits, assessments, and regulatory reviews.

Support alignment with healthcare, payment, privacy, and cybersecurity requirements, including HIPAA, HITRUST, PCI-DSS, SOC, NIST, and applicable privacy regulations.

Provide risk-based analysis and recommendations to support leadership decision-making.

AI, Cloud & Emerging Technology Security

Support Zelis’ adoption of AI, GenAI, machine learning, data analytics, and cloud-native technologies through effective data protection controls.

Help define governance requirements and security guardrails for the use of sensitive information within AI-enabled solutions.

Evaluate emerging technologies for data security implications and recommendappropriate controls.

Partner with architecture and engineering teams to embed security and governance into technology modernization initiatives.

Collaboration & Communication

Participate in cross-functional security initiatives involving multiple business and technology teams.

Collaborate with stakeholders and technical teams across the enterprise.

Provide guidance andknowledge-sharing to junior analysts within the security organization.

Communicate technical risks clearly to both technical and non-technical audiences.

Build strong working relationships that promote a culture of accountability, governance, and data protection across Zelis.

Required Skills & Qualifications

Education & Experience

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems, ora related field, or equivalent experience.

5–7 years of progressive cybersecurity experience, withdemonstrated growth in scope and responsibility.

3+ years of hands-on experience supporting or administering enterprise DLP programs.

1–2 years of experience with DSPM, data discovery, data classification, information protection, or broader data security initiatives.

Experience supporting security governance, risk management, or exception management processes.

Experience in highly regulated healthcare, healthcare technology, financial services, fintech, or payment-processing environments preferred.

Technical Expertise

Solid understanding of enterprise data protection strategies, frameworks, and technologies.

Working knowledge of data lifecycle management, data governance, data classification, information protection, and privacy principles.

Hands-on experience with Microsoft Purview, including:

Purview DLP

Information Protection

Information Governance

Insider Risk Management

Data Lifecycle Management

Compliance Manager

Experience with Microsoft Defender security technologies and broader Microsoft securityecosystem.

Familiarity with DSPM technologies such asBigID, Cyera, Varonis, Wiz,Securiti, or equivalent platforms.

Working knowledge of Azure, AWS, SaaS security architectures, and cloud-native data security controls.

Understanding of identity and access management, data access governance, insider risk management, and Zero Trust principles.

Familiarity with AI governance, GenAI security controls, and secure data enablement practices is a plus.

Communication & Collaboration

Strong analytical, organizational, and problem-solving abilities.

Clear written and verbal communication skills.

Ability to balance business priorities with security and compliance requirements.

Proven ability to build collaborative relationships across business and technology teams.

Comfortable working independently and as part of a team, with direction from the Director of Data Security on strategic priorities.

Preferred Certifications

CISSP,Microsoft Security Certifications,Azure Security Certifications

Success Measures

Success in this role will bedemonstrated through:

Effective day-to-day operation and tuning of DLP controls.

Successful supportof DSPM implementation and maturation.

Improved data classification coverage across enterprise data assets.

Timely processing and reduction of high-risk security exceptions.

Measurable improvements in DLP effectiveness and incident handling support.

Accurate andtimely reporting on data security posture and exception status.

Reliable supportof regulatory, audit, and compliance activities.

Effective supportof secure cloud, analytics, and AI initiatives.

This role is important to strengthening Zelis’ overall cybersecurity posture by helping ensure dataremains protected, discoverable, governed, and compliant — supporting innovation, digital transformation, AI adoption, and continued business growth under the direction of the Director of Data Security.

Please note at this time we are unable to proceed with candidates who require visa sponsorship now or in the future.

Location and Workplace Flexibility

Zelis is headquartered in the U.S., with multiple locations across the country and in Hyderabad, India. Check out ourlocations to learn more about our offices. All employee work locations are based on the needs of the position and are determined by the Leadership team. In-office work and activities vary based on work and team objectives in accordance with Company policies.

While location expectations vary by role, candidates within approximately 50 miles of a U.S. office are generally preferred to support collaboration when needed. Our hybrid approach is flexible, and in-office presence is guided by team and business needs rather than a fixed weekly schedule.

Base Salary Range

$139,000.00 - $176,700.00

At Zelis we are committed to providing fair and equitable compensation packages. The base salary range allows us to make an offer that considers multiple individualized factors, including experience, education, qualifications, as well as job-related and industry-related knowledge and skills, etc. Base pay is just one part of our Total Rewards package, which may also include discretionary bonus plans, commissions, or other incentives depending on the role.

Zelis’ full-time associates are eligible for a highly competitive benefits package as well, which demonstrates our commitment to our employees’ health, well-being, and financial protection. The US-based benefits include a 401k plan with employer match, flexible paid time off, holidays, parental leaves, life and disability insurance, and health benefits including medical, dental, vision, and prescription drug coverage.

Equal Employment Opportunity
Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

We welcome applicants from all backgrounds and encourage you to apply even if you don’t meet 100% of the qualifications for the role. We believe in the value of diverse perspectives and experiences and are committed to building an inclusive workplace for all.

Accessibility Support
We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability or a disabled veteran and require a reasonable accommodation with any part of the application and/or interview process, please emailTalentAcquisition@zelis.com.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities, duties, and skills from time to time.

Zelis Healthcare India Private Limited remote jobs

Senior Active Directory Platform Engineer

Operations Analyst – ECR Inquiry & Dispute Intake

Office Manager

Associate Lead - P&C Operations

Senior Engineer WAF

Senior Director, Enterprise Security Platform Engineering

Client Manager

IBR Reviwer

Engineer II - Analytics & Insights

Associate Project Manager

Data Driven Analyst

Sr Representative - Client Service-1

Project Manager

Senior Network Engineer

Manager, Software Engineering

Client Solutions Consultant

Lead - HRBP

Manager, Provider Dispute Resolution

Data Security Lead ( DLP/DSPM)

Manager, Strategic Partnerships & Growth Strategy

Sr. SOC Analyst