Cybersecurity Compliance Lead — Regulatory & Risk

CVS Health Corporation; Annapolis (MD); Presencial; USD 107 000 - 284 000; Tempo integral

Resumo da oferta

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance programs within the Enterprise Information Security team. You will drive audits, risk management, and policy development across IT and business functions.

The role requires coordinating with senior management, Legal, Internal Audit, and external assessors to ensure alignment and timely remediation.

Qualificações

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC regulations.
• 3+ years in audit methodologies, internal controls, risk assessments, and testing.
• Certifications CRISC, CISA, or CISSP.

Responsabilidades

• Manages and executes procedures to support cybersecurity regulatory audits and compliance activities.
• Develops processes to facilitate regulatory, internal audit, and industry assessments and audits.
• Coaches stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies and procedures to support technology controls.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, and regulators.
• Oversees audits and assessments to measure the effectiveness of security controls and reports results.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Conhecimentos

Regulatory compliance

Regulatory audits

Risk management

Stakeholder collaboration

Regulatory frameworks

Formação académica

Bachelor's degree or equivalent experience

CRISC

CISA

CISSP

Descrição da oferta de emprego

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance programs within the Enterprise Information Security team. You will drive audits, risk management, and policy development across IT and business functions.

The role requires coordinating with senior management, Legal, Internal Audit, and external assessors to ensure alignment and timely remediation.