Cybersecurity Compliance Leader — Regulatory Audits & Risk

CVS Health; Olympia (WA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus/commission

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the enterprise. You will develop procedures, controls, and reporting to ensure compliance with healthcare and financial regulations, coordinating with Legal, Internal Audit, and external assessors.

You will guide audit responses, manage remediation projects, and educate stakeholders on risk management and regulatory frameworks.

Qualifications

• 7+ years of experience in information technology or information security with regulatory focus.
• 3+ years with auditors/assessors and remediation planning.
• 3+ years in relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal controls, risk assessments, control testing.
• Certifications: CRISC, CISA or CISSP.

Responsibilities

• Lead and execute cybersecurity regulatory audits and compliance activities.
• Develop and implement risk management policies and enterprise controls.
• Coach stakeholders on regulatory requirements and best practices.
• Oversee submission of regulatory reports to management, auditors, and regulators.
• Coordinate with IT and business to educate about risk and controls.
• Educate stakeholders on risk frameworks and top regulatory risks.
• Manage relationships with Legal, Internal Audit and external assessors.

Skills

Auditing coordination

Regulatory understanding

Risk management

Communication

Cross-functional collaboration

Education

CRISC

CISA

CISSP

Bachelor's degree or equivalent

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the enterprise. You will develop procedures, controls, and reporting to ensure compliance with healthcare and financial regulations, coordinating with Legal, Internal Audit, and external assessors.

You will guide audit responses, manage remediation projects, and educate stakeholders on risk management and regulatory frameworks.