Cybersecurity Compliance Lead

CVS Health Corporation; Charleston (WV); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Competitive benefits

Bonus eligibility

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for the Enterprise Information Security team, developing controls, procedures and reporting to ensure alignment with applicable laws and standards.

You will coordinate audits, educate stakeholders on risk frameworks, and collaborate with Legal, Internal Audit and external assessors to support regulatory programs and remediation efforts.

Qualifications

• 7+ years in information technology or information security with strong regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments and control testing.

Responsibilities

• Lead and execute procedures to support cybersecurity regulatory audits and compliance activities.
• Develop processes to facilitate regulatory assessments and audits.
• Coach stakeholders on regulatory requirements and industry best practices.
• Define risk management policies to support enterprise technology controls.
• Oversee preparation of regulatory reports to management, auditors and regulators.
• Monitor audits to measure security control effectiveness and report results.

Skills

Regulatory compliance

Audits & assessments

Information security

Risk management

Communication

Education

Bachelor's degree or equivalent experience

CRISC / CISA / CISSP certifications

Tools

CRISC/CISA/CISSP certifications

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for the Enterprise Information Security team, developing controls, procedures and reporting to ensure alignment with applicable laws and standards.

You will coordinate audits, educate stakeholders on risk frameworks, and collaborate with Legal, Internal Audit and external assessors to support regulatory programs and remediation efforts.