Cybersecurity Compliance Lead

CVS Health Corporation; Columbus (OH); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Paid Time Off

Retirement benefits

Wellness program

Job summary

CVS Health Corporation in the United States is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Information Security team. You will guide teams through assessments, controls, and reporting to ensure regulatory adherence across the organization.

You'll educate stakeholders on risk, coordinate audits, and partner with Legal, Internal Audit, and external assessors to strengthen regulatory programs and control effectiveness.

Qualifications

• 7+ years in information technology or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• Experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.

Responsibilities

• Manage procedures to support cybersecurity regulatory audits and compliance activities.
• Develop processes to support regulatory, internal audit, and industry assessments.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies for enterprise technology controls.
• Oversee submission of regulatory reports to management, auditors, and regulators.
• Oversee audits to measure security control effectiveness and report results.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits

Risk management

Regulatory frameworks

Communication

Education

Bachelor's degree or equivalent experience

Tools

CRISC

CISA

CISSP

Job description

CVS Health Corporation in the United States is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Information Security team. You will guide teams through assessments, controls, and reporting to ensure regulatory adherence across the organization.

You'll educate stakeholders on risk, coordinate audits, and partner with Legal, Internal Audit, and external assessors to strengthen regulatory programs and control effectiveness.