Cybersecurity Compliance Lead

CVS Health Corporation; Austin (TX); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide audits, create controls, and report on compliance posture to senior leadership, Legal, Internal Audit, and external assessors.

The role emphasizes risk-based approach, process improvement, and collaboration with IT and business partners to educate on risk, coordinate audits, and ensure timely remediation across

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, control testing, and risk assessments.
• Professional certifications CRISC, CISA, or CISSP.

Responsibilities

• Lead and execute procedures for cybersecurity regulatory audits and compliance activities, establishing schedules and plans to meet deadlines.
• Develop processes to support regulatory assessments and audits across the enterprise.
• Coach stakeholders on regulatory compliance requirements and best practices.
• Define risk management policies and procedures to support technology controls.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversee audits and assessments to measure the effectiveness of security controls.
• Educate stakeholders on risk management frameworks and top risks related to regulatory compliance.

Skills

Regulatory compliance

Auditing & assessment

Risk management

Regulatory frameworks familiarity

CRISC/CISA/CISSP knowledge

Stakeholder communication

Education

Bachelor's degree or equivalent experience

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide audits, create controls, and report on compliance posture to senior leadership, Legal, Internal Audit, and external assessors.

The role emphasizes risk-based approach, process improvement, and collaboration with IT and business partners to educate on risk, coordinate audits, and ensure timely remediation across