Cybersecurity Compliance Leader – Regulatory Audits & Risk

CVS Health Corporation; Woonsocket (RI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation, based in Woonsocket, RI, seeks a Senior Manager of Cybersecurity Compliance to lead regulatory initiatives across the Enterprise Information Security team. You will guide colleagues, design controls, and coordinate audits with IT, Legal, Internal Audit, and external assessors to ensure robust regulatory compliance.

The role emphasizes risk education, control improvements, and actionable reporting aligned with HIPAA, SOX, PCI, and other standards.

Qualifications

• 7+ years in information technology or information security with regulatory knowledge.
• 3+ years coordinating with auditors/assessors and remediation plans.
• 3+ years working with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, and NAIC.

Responsibilities

• Manages and executes procedures to facilitate cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develops processes to support regulatory, internal audit, and industry-standard assessments and audits.
• Coaches stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies to support technology controls enterprise-wide.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, and regulators.
• Oversees audits to measure control effectiveness and reports results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Stakeholder communication

Project management

Information security

Education

Bachelor's degree

Job description

CVS Health Corporation, based in Woonsocket, RI, seeks a Senior Manager of Cybersecurity Compliance to lead regulatory initiatives across the Enterprise Information Security team. You will guide colleagues, design controls, and coordinate audits with IT, Legal, Internal Audit, and external assessors to ensure robust regulatory compliance.

The role emphasizes risk education, control improvements, and actionable reporting aligned with HIPAA, SOX, PCI, and other standards.