Cybersecurity Compliance Leader

CVS Health Corporation; Salt Lake City (UT); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation in Salt Lake City is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives within the Enterprise Information Security team. This role will develop controls, reporting, and processes to ensure regulatory adherence across the enterprise.

You will partner with IT and business teams to educate on risk, coordinate audits, and manage remediation, while guiding stakeholders on frameworks like HIPAA, SOX, NIST, and CISA/CISSP standards.

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years with auditors/assessors, responses and remediation.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, control testing, risk assessments.
• CRISC, CISA or CISSP certifications are preferred.

Responsibilities

• Lead and execute procedures to support cybersecurity regulatory audits and compliance activities.
• Develop processes to support regulatory, internal audit, and industry assessments.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies to support technology controls.
• Oversee preparation and submission of regulatory reports to management and auditors.
• Oversee audits to measure security control effectiveness and report results.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Auditing experience

Regulatory frameworks

Audit methodologies

CRISC

CISA

CISSP

Education

Bachelor's degree

Job description

CVS Health Corporation in Salt Lake City is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives within the Enterprise Information Security team. This role will develop controls, reporting, and processes to ensure regulatory adherence across the enterprise.

You will partner with IT and business teams to educate on risk, coordinate audits, and manage remediation, while guiding stakeholders on frameworks like HIPAA, SOX, NIST, and CISA/CISSP standards.