Cybersecurity Compliance Lead - Regulatory Audits

CVS Health; Denver (CO); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

PTO

Retirement plan

Wellness programs

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide regulatory assessments, develop controls, and collaborate with Legal, Internal Audit, and line of business stakeholders.

The role emphasizes process improvements, audit readiness, and transparency through metrics, training, and defined risk management strategies.

Qualifications

• 7+ years of information technology or information security experience with regulations and cybersecurity controls.
• 3+ years working with auditors/assessors, managing inquiries and remediation plans.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, control testing and risk assessments.
• Professional certifications such as CRISC, CISA, CISSP.

Responsibilities

• Manage procedures to support cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develop processes to support regulatory, internal audit, and industry standard assessments and audits.
• Provide coaching and education to stakeholders on regulatory requirements and best practices.
• Define and develop risk management policies to support security controls enterprise-wide.
• Oversee preparation and submission of regulatory compliance reports to management, auditors and regulators.
• Oversee audits and assessments to measure control effectiveness and report results to owners.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits coordination

Risk management

Stakeholder education

Controls testing

Education

Bachelor’s degree or equivalent experience

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide regulatory assessments, develop controls, and collaborate with Legal, Internal Audit, and line of business stakeholders.

The role emphasizes process improvements, audit readiness, and transparency through metrics, training, and defined risk management strategies.