Cybersecurity Compliance Leader — Regulatory Audits

CVS Health; Hartford (CT); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement savings plan

Paid time off

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for the Enterprise Information Security team. You will guide audits, develop controls, and educate stakeholders on risk and regulatory frameworks across the enterprise.

The role requires extensive experience with healthcare and retailer regulatory landscapes, strong collaboration with Legal and Internal Audit, and the ability to manage remediation efforts and reporting.

Qualifications

• 7+ years in information technology or information security with regulatory exposure.
• 3+ years working with auditors/assessors and managing inquiries.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST or NAIC.
• 3+ years in audit methods, control testing and risk assessments.
• CRISC, CISA or CISSP certifications are preferred.

Responsibilities

• Lead procedures to support cybersecurity regulatory audits and compliance activities.
• Develop processes for regulatory assessments and audits across the enterprise.
• Coach stakeholders on regulatory requirements and industry best practices.
• Define risk management policies to support enterprise technology controls.
• Oversee regulatory reports to management, auditors and regulators.
• Oversee audits to measure control effectiveness and report findings.

Skills

Regulatory compliance

Audit coordination

Risk management

Information security

Regulatory frameworks

Education

Bachelor's degree

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives for the Enterprise Information Security team. You will guide audits, develop controls, and educate stakeholders on risk and regulatory frameworks across the enterprise.

The role requires extensive experience with healthcare and retailer regulatory landscapes, strong collaboration with Legal and Internal Audit, and the ability to manage remediation efforts and reporting.