Cybersecurity Compliance Lead: Regulatory Audits & Risk

CVS Health; Austin (TX); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across CVS Health’s Enterprise Information Security team. You will guide assessments, coordinate audits, and implement controls and reporting to ensure regulatory adherence across the enterprise.

You will partner with IT, Legal, Internal Audit, and external assessors to educate stakeholders, develop risk management policies, and drive remediation plans while aligning with industry

Qualifications

• 7+ years in IT or information security with deep regulatory controls knowledge.
• 3+ years with auditors/assessors and remediation oversight.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, risk assessments, and control testing.
• Certifications: CRISC, CISA, or CISSP.

Responsibilities

• Manage procedures to support cybersecurity regulatory audits and create schedules.
• Develop processes for regulatory, internal audit, and industry audits.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies to support technology controls across the enterprise.
• Oversee submission of regulatory reports to management, auditors, and regulators.
• Oversee audits to measure security control effectiveness and report results.
• Educate stakeholders on risk management frameworks and top compliance risks.

Skills

Regulatory compliance knowledge

Auditing experience

Regulatory frameworks

Information security controls

Risk management

Education

Bachelor's degree

CRISC

CISA

CISSP

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across CVS Health’s Enterprise Information Security team. You will guide assessments, coordinate audits, and implement controls and reporting to ensure regulatory adherence across the enterprise.

You will partner with IT, Legal, Internal Audit, and external assessors to educate stakeholders, develop risk management policies, and drive remediation plans while aligning with industry