Cybersecurity Compliance Leader — Regulatory Expert

CVS Health; Cumberland (RI); Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligible

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will coordinate audits, develop controls, and educate stakeholders on risk and regulatory requirements.

You’ll partner with Legal, Internal Audit, and IT to ensure timely regulatory assessments, reporting, and remediation, shaping a robust control environment for healthcare and retail operations.

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors; manage remediation.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC regulations.
• 3+ years in audit methodologies, internal controls, risk assessments, and control testing.
• CRISC, CISA, or CISSP certifications preferred.

Responsibilities

• Lead procedures to facilitate cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develop processes to support regulatory, internal audit and industry standard assessments and audits.
• Coach stakeholders on regulatory compliance requirements and best practices.
• Define risk management policies and procedures to support technology controls enterprise-wide.
• Oversee preparation/submission of regulatory reports to management, auditors, and regulators.

Skills

Regulatory compliance

Audit coordination

Regulatory frameworks

Risk assessments

CISA

CRISC

CISSP

Education

Bachelor's degree or equivalent experience

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will coordinate audits, develop controls, and educate stakeholders on risk and regulatory requirements.

You’ll partner with Legal, Internal Audit, and IT to ensure timely regulatory assessments, reporting, and remediation, shaping a robust control environment for healthcare and retail operations.