Cybersecurity Compliance Lead - Regulatory Programs

CVS Health Corporation; Washington (District of Columbia); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Health insurance

Retirement savings

Paid time off

Wellness program

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead and execute strategic regulatory compliance initiatives across the enterprise, guiding audits and assessments, and enhancing controls and reporting.

This role partners with IT and business teams to educate on risk, develop risk management policies, and coordinate regulatory audits with senior management, Legal, Internal Audit, and external assessors.

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory knowledge.
• 3+ years working with auditors/assessors, handling inquiries and remediation plans.
• 3+ years of experience with regulations, standards and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• CRISC, CISA, or CISSP certification preferred.

Responsibilities

• Manages procedures to support regulatory audits and compliance activities with schedules and plans.
• Develops processes to support regulatory, internal audit, and industry assessments and audits.
• Coaches stakeholders on regulatory requirements and best practices.
• Defines risk management policies to support enterprise technology controls.
• Oversees preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversees audits and assessments to measure security control effectiveness and communicates results.
• Educates stakeholders on risk frameworks and top regulatory risks.

Skills

Regulatory compliance

Information security

Auditing

Risk assessment

Communication

Education

Bachelor's degree

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead and execute strategic regulatory compliance initiatives across the enterprise, guiding audits and assessments, and enhancing controls and reporting.

This role partners with IT and business teams to educate on risk, develop risk management policies, and coordinate regulatory audits with senior management, Legal, Internal Audit, and external assessors.