Cybersecurity Compliance Lead — Reg Audits & Risk

CVS Health Corporation; Saint Paul (MN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Equity awards

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives and coordinate across Legal, Internal Audit, and external assessors. You will develop and manage procedures, controls, and reporting to ensure compliance with regulations, and educate stakeholders on risk and control effectiveness.

The role requires experience with regulatory frameworks including FTC, HIPAA, SOX, PCI, NIST, ISO, HITRUST, and NAIC, plus strong audit

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• CRISC, CISA, or CISSP certification.

Responsibilities

• Lead and execute procedures to facilitate cybersecurity regulatory audits and compliance activities.
• Develop processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies to support technology controls.
• Oversee preparation and submission of regulatory reports to management and regulators.
• Oversee audits to measure security control effectiveness and report results.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Auditing collaboration

Risk management

Regulatory frameworks knowledge

Education

Bachelor's degree or equivalent experience

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives and coordinate across Legal, Internal Audit, and external assessors. You will develop and manage procedures, controls, and reporting to ensure compliance with regulations, and educate stakeholders on risk and control effectiveness.

The role requires experience with regulatory frameworks including FTC, HIPAA, SOX, PCI, NIST, ISO, HITRUST, and NAIC, plus strong audit