Cybersecurity Compliance Strategist

CVS Health Corporation; Springfield (IL); Hybrid; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across CVS Health's Enterprise Information Security team. This role develops controls, procedures, and reporting to ensure adherence to regulations, while guiding stakeholders through risk-informed decisions.

You will coordinate regulatory audits, educate teams on risk management frameworks, and collaborate with Legal, Internal Audit, and external assessors to strengthen the

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years auditing experience and remediation planning.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, internal control frameworks, risk assessments and control testing.
• CRISC, CISA, or CISSP certification prerequisites.

Responsibilities

• Manages and executes procedures to facilitate cybersecurity regulatory audits and compliance activities, establishing schedules to meet deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments and audits.
• Provides coaching to stakeholders on regulatory compliance requirements and industry best practices.
• Defines and develops risk management policies to support technology controls across the enterprise.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure security control effectiveness and reports results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Auditing

Regulatory compliance

Risk management

Controls testing

Regulatory frameworks

Stakeholder communication

Education

CRISC certification

CISA certification

CISSP certification

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across CVS Health's Enterprise Information Security team. This role develops controls, procedures, and reporting to ensure adherence to regulations, while guiding stakeholders through risk-informed decisions.

You will coordinate regulatory audits, educate teams on risk management frameworks, and collaborate with Legal, Internal Audit, and external assessors to strengthen the