Cybersecurity Compliance Leader

CVS Health Corporation; Frankfort (KY); Sur place; USD 107 000 - 284 000; Plein temps

Avantages offerts par ce poste

Bonus eligibility

Equity awards

Comprehensive benefits

Résumé du poste

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across the Enterprise Information Security team, coordinating audits and remediation efforts.

You will develop controls, educate stakeholders, and report on control effectiveness, partnering with Legal, Internal Audit, and external assessors to align with frameworks such as NIST, ISO, HIPAA, and PCI.

Qualifications

• 7+ years of IT or information security experience with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation plans.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• Professional certifications such as CRISC, CISA, or CISSP.

Responsabilités

• Manages and executes procedures to facilitate cybersecurity regulatory audits.
• Develops processes to support regulatory, internal audit, and industry assessments.
• Coaches stakeholders on regulatory requirements and best practices.
• Defines risk management policies to support technology controls.
• Oversees preparation and submission of regulatory reports to management and regulators.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Connaissances

Regulatory compliance

Auditing with regulators

Information security

Risk management

Communication skills

Project management

Formation

Bachelor's degree or equivalent experience

Outils

CRISC

CISA

CISSP

Description du poste

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across the Enterprise Information Security team, coordinating audits and remediation efforts.

You will develop controls, educate stakeholders, and report on control effectiveness, partnering with Legal, Internal Audit, and external assessors to align with frameworks such as NIST, ISO, HIPAA, and PCI.