Cybersecurity Compliance Leader: Audits & Risk

CVS Health Corporation; Atlanta (GA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation in Atlanta, GA is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory assessments and manage enterprise-wide compliance controls.

You will partner with IT and business teams, coordinate audits, develop risk policies, and report findings to executives and regulators. This role emphasizes educating stakeholders and improving control effectiveness across the organization.

The position requires 7+ years in IT/security and relevant certifications.

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations and cybersecurity controls.
• 3+ years working with auditors/assessors, handling inquiries and remediation plans.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC regulations.

Responsibilities

• Manages and executes procedures to support cybersecurity regulatory audits and compliance activities and meets deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments.
• Coaches and educates stakeholders on regulatory requirements and industry best practices.
• Defines risk management policies to support enterprise technology controls.
• Oversees preparation and submission of regulatory reports to management, auditors, and regulators.
• Educates stakeholders on risk frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Stakeholder communication

IT security

Education

Bachelor's degree in related field

Tools

CRISC

CISA

CISSP

Job description

CVS Health Corporation in Atlanta, GA is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory assessments and manage enterprise-wide compliance controls.

You will partner with IT and business teams, coordinate audits, develop risk policies, and report findings to executives and regulators. This role emphasizes educating stakeholders and improving control effectiveness across the organization.

The position requires 7+ years in IT/security and relevant certifications.