Cybersecurity Compliance Leader - Regulatory Audits & Risk

CVS Health Corporation; Cumberland (RI); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Retirement savings options

Wellness programs

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Information Security organization. You will guide regulatory assessments, develop controls, and coordinate audits across CVS Health.

The role partners with Legal, Internal Audit, and senior leadership to ensure alignment, and requires deep regulatory knowledge and strong project management to drive remediation and reporting.

Qualifications

• 7+ years of experience in information technology or information security with regulatory knowledge.
• 3+ years with auditors/assessors and remediation planning.
• 3+ years in regulatory standards (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal controls, risk assessments, and control testing.

Responsibilities

• Manages and executes procedures to facilitate and support various cybersecurity regulatory audits and compliance activities, establishing schedules and plans to ensure deadlines are met.
• Develops efficient processes to facilitate and support regulatory, internal audit, and industry standard assessments and audits.
• Provides coaching, feedback, and education to stakeholders and colleagues on regulatory compliance requirements and industry best practices.
• Defines and develops risk management policies and procedures to support the implementation of technology controls across the enterprise.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure the effectiveness of security controls, providing results back to the responsible party/owner.
• Educates key stakeholders on risk management frameworks and top risks related to regulatory compliance.

Skills

Regulatory compliance

Auditing & assessment

Risk management

Regulatory frameworks

Certifications (CRISC/CISA/CISSP)

Education

Bachelor’s degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Information Security organization. You will guide regulatory assessments, develop controls, and coordinate audits across CVS Health.

The role partners with Legal, Internal Audit, and senior leadership to ensure alignment, and requires deep regulatory knowledge and strong project management to drive remediation and reporting.