Cybersecurity Compliance Leader

CVS Health; Trenton (NJ); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program in the United States. You will guide teams in audits, controls, and reporting to ensure regulatory alignment and risk reduction.

This role partners with Legal, Internal Audit, and external assessors to educate stakeholders, improve controls, and implement risk management policies.

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations, including requirements and implications for cybersecurity controls.
• 3+ years working with auditors and/or assessors, formulating responses, managing inquiries, and designing/overseeing remediation plans as necessary.
• 3+ years of experience with relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, and NAIC).
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessments, and control testing techniques.
• Certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Manage and execute procedures to support cybersecurity regulatory audits and compliance activities, establishing schedules and plans to meet deadlines.
• Develop efficient processes to facilitate regulatory, internal audit, and industry standard assessments and audits.
• Provide coaching, feedback, and education to stakeholders on regulatory compliance requirements and best practices.
• Define and develop risk management policies and procedures to support technology controls across the enterprise.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversee audits and assessments to measure the effectiveness of security controls and report results to owners.
• Educate key stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Auditor liaison

Regulatory frameworks

Audit methodologies

Risk management

Security controls

Regulatory communications

Education

Bachelor’s degree or equivalent experience

CRISC certification

CISA certification

CISSP certification

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security program in the United States. You will guide teams in audits, controls, and reporting to ensure regulatory alignment and risk reduction.

This role partners with Legal, Internal Audit, and external assessors to educate stakeholders, improve controls, and implement risk management policies.