Cybersecurity Compliance Leader: Enterprise Risk & Audit

CVS Health; City of Albany (NY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

Retirement savings options

Wellness programs

Equity award program

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise-wide regulatory compliance initiatives. You will guide audits and remediation, develop controls, and partner with IT, Legal and Internal Audit to ensure alignment with risk management practices.

The role emphasizes coordinating regulatory assessments, educating stakeholders, and driving continuous improvement in controls and reporting across the organization.

Qualifications

• 7+ years of experience in information technology or information security with deep understanding of regulations and cybersecurity controls.
• 3+ years of experience working with auditors/assessors, managing inquiries and remediation plans.
• 3+ years of experience with relevant regulations, standards and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessment and control testing techniques.
• Professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Manage procedures to support cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develop processes to support regulatory, internal audit, and industry-standard assessments.
• Coach stakeholders on regulatory compliance requirements and industry best practices.
• Define risk management policies to support technology controls across the enterprise.
• Oversee preparation and submission of regulatory compliance reports to management, auditors and regulators.
• Oversee audits to measure security control effectiveness and report results to owners.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Communication

Program governance

Education

Bachelor’s degree or equivalent experience

CRISC

CISA

CISSP

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise-wide regulatory compliance initiatives. You will guide audits and remediation, develop controls, and partner with IT, Legal and Internal Audit to ensure alignment with risk management practices.

The role emphasizes coordinating regulatory assessments, educating stakeholders, and driving continuous improvement in controls and reporting across the organization.