Regulatory Cybersecurity Compliance Lead

CVS Health Corporation; Montpelier (VT); On-site; USD 171,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus & equity program

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the enterprise. You will guide audits, develop controls, and partner with IT and business teams to measure risk and drive remediation.

You will educate stakeholders on risk frameworks, coordinate with Legal, Internal Audit, and external assessors, and manage processes for regulatory assessments in a large healthcare and retail environment.

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years with auditors/assessors and remediation planning.
• 3+ years in regulatory frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, controls testing, risk assessments.
• CRISC, CISA, or CISSP certifications preferred.

Responsibilities

• Lead procedures to support cybersecurity regulatory audits and compliance activities with schedules and deadlines.
• Develop processes for regulatory, internal audit, and industry standard assessments.
• Educate stakeholders on regulatory requirements and best practices.
• Define risk management policies to support technology controls enterprise-wide.
• Oversee preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversee audits and assessments to measure control effectiveness.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Stakeholder communication

Education

Bachelor’s degree or equivalent

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the enterprise. You will guide audits, develop controls, and partner with IT and business teams to measure risk and drive remediation.

You will educate stakeholders on risk frameworks, coordinate with Legal, Internal Audit, and external assessors, and manage processes for regulatory assessments in a large healthcare and retail environment.