Cybersecurity Compliance Lead: Regulatory & Audit Strategy

CVS Health Corporation; Des Moines (IA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Retirement savings options

Wellness programs

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across Enterprise Information Security. You will guide audits, manage controls, educate stakeholders, and drive risk-based improvement across the organization.

The role requires coordinating with Legal, Internal Audit, and regulators, developing policies, and reporting on control effectiveness.

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory knowledge.
• 3+ years working with auditors/assessors and handling remediation plans as needed.
• 3+ years in relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing techniques.

Responsibilities

• Manages procedures to support cybersecurity regulatory audits and compliance activities, setting schedules and deadlines.
• Develops processes to support regulatory, internal audit, and industry-standard assessments and audits.
• Coaches stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies to support technology controls across the enterprise.
• Oversees preparation and submission of regulatory reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure control effectiveness and communicates results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Information security

Education

Bachelor's degree or equivalent (including certifications)

CRISC

CISA

CISSP

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across Enterprise Information Security. You will guide audits, manage controls, educate stakeholders, and drive risk-based improvement across the organization.

The role requires coordinating with Legal, Internal Audit, and regulators, developing policies, and reporting on control effectiveness.