Cybersecurity Compliance Lead – Risk, Audit & Controls

CVS Health Corporation; Montgomery (AL); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Comprehensive benefits package

Paid time off

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide audit responses, manage remediation plans, and collaborate with Legal, Internal Audit, and external assessors to ensure effective controls.

You will develop risk management policies, educate stakeholders on frameworks, and oversee reporting to regulators while driving continuous improvement of controls and

Qualifications

• 7+ years of experience in information technology or information security with understanding of regulations and implications for cybersecurity controls.
• 3+ years collaborating with auditors/assessors, handling inquiries and remediation plans as needed.
• 3+ years in relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing techniques.
• Relevant professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Lead procedures to facilitate and support cybersecurity regulatory audits and compliance activities with schedules and plans.
• Develop processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coach and educate stakeholders on regulatory compliance requirements and best practices.
• Define and develop risk management policies to support technology controls across the enterprise.
• Oversee preparation and submission of regulatory reports to management, auditors, assessors, and regulators.
• Oversee audits and assessments to measure security control effectiveness and report results to owners.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Regulatory frameworks

Risk assessment

Communication skills

Program management

Cross-functional collaboration

Education

Bachelor's degree or equivalent experience

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide audit responses, manage remediation plans, and collaborate with Legal, Internal Audit, and external assessors to ensure effective controls.

You will develop risk management policies, educate stakeholders on frameworks, and oversee reporting to regulators while driving continuous improvement of controls and