Cybersecurity Compliance Lead: Regulatory & Audit

CVS Health; Santa Fe (NM); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, develop control frameworks, and educate stakeholders on risk.

This role partners with IT and business teams to improve controls and provide actionable metrics across the organization. You will coordinate with Legal, Internal Audit, and external assessors to align initiatives, manage remediation, and report findings, ensuring compliance with major

Qualifications

• 7+ years in information technology or information security with deep regulatory understanding.
• 3+ years working with auditors/assessors, responding to inquiries and overseeing remediation plans.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing.
• Certifications such as CRISC, CISA, or CISSP are preferred.

Responsibilities

• Lead procedures to support cybersecurity regulatory audits and compliance activities with schedules and plans.
• Develop processes to support regulatory, internal audits, and industry assessments.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies to support enterprise controls.
• Oversee preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversee audits to measure security control effectiveness and report results.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Stakeholder education

Regulatory reporting

Project management

Education

Bachelor’s degree

CRISC

CISA

CISSP

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, develop control frameworks, and educate stakeholders on risk.

This role partners with IT and business teams to improve controls and provide actionable metrics across the organization. You will coordinate with Legal, Internal Audit, and external assessors to align initiatives, manage remediation, and report findings, ensuring compliance with major