Cybersecurity Compliance Leader

CVS Health Corporation; Lincoln (NE); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Retirement plans

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide assessments, develop controls, and manage audit readiness across the enterprise, partnering with Legal, Internal Audit, and external assessors to ensure alignment and timely remediation.

The role requires deep regulatory knowledge across HIPAA, SOX, PCI, NIST, ISO, HITRUST, and NAIC, plus experience coaching stakeholders and managing complex audits

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations.
• 3+ years working with auditors/assessors, issuing responses and remediation plans.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing.

Responsibilities

• Manage procedures to facilitate and support cybersecurity regulatory audits and compliance activities, establishing schedules and plans to meet deadlines.
• Develop efficient processes to facilitate regulatory, internal audit, and industry standard assessments and audits.
• Provide coaching, feedback, and education to stakeholders on regulatory compliance requirements and best practices.
• Define and develop risk management policies and procedures to support enterprise controls.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversee audits and assessments to measure the effectiveness of security controls and report results to owners.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Cybersecurity controls

CRISC

CISA

CISSP

Regulatory frameworks

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide assessments, develop controls, and manage audit readiness across the enterprise, partnering with Legal, Internal Audit, and external assessors to ensure alignment and timely remediation.

The role requires deep regulatory knowledge across HIPAA, SOX, PCI, NIST, ISO, HITRUST, and NAIC, plus experience coaching stakeholders and managing complex audits