Cyber Resiliency & GRC Program Lead

CVS Health; Carson City (NV); On-site; USD 83,430 - 222,480; Full time

Benefits offered by this job

Bonus program

Health benefits

Paid time off

Retirement plan

Job summary

CVS Health in the United States is seeking a Cyber Resiliency professional to define and execute operational activities tied to the DDAT Cybersecurity GRC program, aligning controls with NIST/ISO standards and supporting audits across the enterprise.

You will lead risk assessments, metrics reporting, and collaboration with Legal, Internal Audit, and regulators, helping to strengthen resilience and disaster recovery capabilities.

Qualifications

• 5+ years in cyber resiliency, audits, risk management in a corporate setting.
• 3+ years understanding cyber security compliance frameworks and financial implications.
• 3+ years in audit methodologies, control testing, and process improvement.
• 1+ years of cloud technologies experience.
• 1+ years of program management including planning and execution.

Responsibilities

• Managing and executing procedures to facilitate and support cybersecurity resiliency activities. Establishes schedules and plans to ensure deadlines are being met.
• Develops efficient processes to facilitate and support regulatory, internal audit and industry standard assessments and audits.
• Provides coaching, feedback, and educates stakeholders and colleagues relative to cyber resiliency requirements and industry best practices.
• Defines or develops risk management policies and procedures to support the implementation of cyber resiliency processes and controls across the enterprise.
• Oversees preparation and submission of cyber resiliency metrics and reports to management, Audit Services, external auditors/assessors, and regulators.
• Oversees assessments to measure the effectiveness of cyber resiliency controls and provides results back to responsible party/owner.
• Educates key stakeholders on risk management frameworks and top risks related to the system(s) or Line of Business for cyber resilience.
• Communicating and contributing to broad secure architectural solutions for Cyber Resiliency functions such as Incident Response, Disaster Recovery, and Business Continuity

Skills

Cyber resiliency

Internal audit

Regulatory compliance

Cloud technologies

Program management

Education

Bachelor’s degree or equivalent

Job description

CVS Health in the United States is seeking a Cyber Resiliency professional to define and execute operational activities tied to the DDAT Cybersecurity GRC program, aligning controls with NIST/ISO standards and supporting audits across the enterprise.

You will lead risk assessments, metrics reporting, and collaboration with Legal, Internal Audit, and regulators, helping to strengthen resilience and disaster recovery capabilities.