Richard Clayton

About Richard Clayton

I lead enterprise security programs focused on reducing organizational data risk in complex, highly regulated environments.My work sits at the intersection of security operations, governance, and data protection where I am translating regulatory requirements and risk expectations into operational security capabilities that teams can actually execute and sustain.Throughout my career, I’ve built and led enterprise programs spanning data protection, PCI compliance, security operations, and governance strategy across healthcare and regulated industries. I’m most effective where organizations need structure brought to complexity and standing up new capabilities, aligning stakeholders across legal, privacy, audit, and technology teams, and turning compliance obligations into measurable risk reduction.Currently, I lead enterprise data protection and PCI initiatives within a large healthcare system, focusing on:• Establishing visibility into sensitive data at scale• Operationalizing governance through DSPM and DLP programs• Delivering executive reporting aligned to risk and business outcomes• Reducing scope and exposure through practical security architectureMy background includes security engineering, consulting, and enterprise operations leadership, which allows me to bridge strategy with execution - ensuring that security programs are not just compliant, but operationally effective.I’m particularly interested in leadership roles where security must evolve from fragmented controls into cohesive, operational programs that support business growth while managing risk.

Experience

1. Director of Information Security, Data Protection & Pci Programs

   Baylor Scott & White Health

   Oct 2024 — Present · Columbus, OH, US

   At Baylor I oversee the Data Protection Program responsible for the protection of petabytes of structured and unstructured classified data, which also includes both the DLP, Insider Risk, Data Governance, and PCI Programs which I built from the ground up which are focused on multiple SAQs (SAQ-A, SAQ P2PE, SAQ-D) and EPIC with MyChart. It is my responsibility to work with the business and other stakeholders like the Digital Health and Data Governance groups to align security controls and guarantee confidentiality, integrity, and availability of our most critical company assets, the data.

Education

• UC Santa Barbara

  Bachelor of Arts - BA, Law & Society

  1992 — 1997

• Franklin University

  Master's degree, Cybersecurity