Cybersecurity Compliance Leader

CVS Health Corporation; Harrisburg (Dauphin County); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Bonus program

Equity awards

Paid time off

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for Enterprise Information Security. You will guide audits, develop controls, and educate stakeholders on risk management frameworks across the enterprise.

The role requires extensive experience with regulatory regimes such as HIPAA, SOX, and PCI, plus certifications like CRISC, CISA, or CISSP.

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in regulations, standards and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal controls, risk assessments, and control testing.
• Professional certifications: CRISC, CISA, or CISSP.

Responsibilities

• Lead and execute procedures to support cybersecurity regulatory audits and compliance activities, including schedules and deadlines.
• Develop processes to support regulatory, internal audit, and industry assessments and audits.
• Coach stakeholders on regulatory requirements and industry best practices.
• Define risk management policies to support technology controls enterprise-wide.
• Oversee preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversee audits to measure effectiveness of security controls and report results.

Skills

Regulatory compliance

Audit coordination

Risk management

Cybersecurity controls

CRISC

CISA

CISSP

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for Enterprise Information Security. You will guide audits, develop controls, and educate stakeholders on risk management frameworks across the enterprise.

The role requires extensive experience with regulatory regimes such as HIPAA, SOX, and PCI, plus certifications like CRISC, CISA, or CISSP.