Cybersecurity Compliance Lead: Regulation & Audit

CVS Health Corporation; Lansing (MI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program, developing controls, procedures, and reporting to meet regulatory and industry requirements.

The role partners with IT, Legal, Internal Audit, and external assessors to guide audits, track remediation, and deliver actionable metrics that strengthen the control environment.

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations, including requirements and implications for cybersecurity controls.
• 3+ years of experience working with auditors and/or assessors, formulating responses, managing inquiries, and designing/overseeing remediation plans as necessary.
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessments, and control testing techniques.
• Professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Manage and execute procedures to facilitate and support cybersecurity regulatory audits and compliance activities.
• Develop efficient processes for regulatory, internal audit, and industry-standard assessments and audits.
• Educate stakeholders on regulatory requirements and industry best practices.

Skills

Auditing experience

Regulatory compliance

Risk assessment

CRISC / CISA / CISSP

Education

Bachelor's degree

Tools

GRC tools

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program, developing controls, procedures, and reporting to meet regulatory and industry requirements.

The role partners with IT, Legal, Internal Audit, and external assessors to guide audits, track remediation, and deliver actionable metrics that strengthen the control environment.