Cybersecurity Compliance Lead - Enterprise Risk & Audits

CVS Health Corporation; Pierre (SD); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program. You will guide audits, develop controls, and collaborate with Legal, Internal Audit, and senior management to improve risk visibility and control effectiveness.

The role requires extensive experience with cybersecurity regulations, audits, and risk management, with strong communication and cross-functional collaboration

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory knowledge.
• 3+ years working with auditors/assessors and managing inquiries/remediation plans.
• 3+ years experience with regulations/standards/frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years experience in audit methodologies, internal control frameworks, risk assessments, and control testing.
• Professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Lead procedures to facilitate cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develop processes to support regulatory, internal audits, and industry-standard assessments and audits.
• Provide coaching on regulatory requirements and best practices to stakeholders and colleagues.
• Define risk management policies and procedures for technology controls across the enterprise.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversee audits to measure security control effectiveness and report results to owners.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Control testing

Education

Bachelor's degree or equivalent experience

Tools

CRISC

CISA

CISSP

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program. You will guide audits, develop controls, and collaborate with Legal, Internal Audit, and senior management to improve risk visibility and control effectiveness.

The role requires extensive experience with cybersecurity regulations, audits, and risk management, with strong communication and cross-functional collaboration