Regulatory Cybersecurity Compliance Lead

CVS Health Corporation; Providence (RI); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation in Providence, RI seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance programs and audits. You will develop controls, coordinate with IT and business teams, and prepare reports for management, auditors, and regulators.

The role requires 7+ years in IT/security with regulatory expertise, 3+ years with auditors, and relevant certifications (CRISC/CISA/CISSP). Excellent collaboration and communication skills are essential.

Qualifications

• 7+ years in IT or information security with a deep understanding of regulations and cybersecurity controls.
• 3+ years working with auditors/assessors, managing inquiries and remediation plans.
• 3+ years in relevant regulations, standards and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments and control testing.
• Certifications such as CRISC, CISA or CISSP are preferred.

Responsibilities

• Lead and execute procedures to support cybersecurity regulatory audits and compliance activities.
• Develop processes to facilitate regulatory and internal audits and assessments.
• Coach stakeholders on regulatory compliance requirements and best practices.
• Define and develop risk management policies for enterprise technology controls.
• Oversee preparation and submission of regulatory reports to management, auditors and regulators.
• Oversee audits to measure the effectiveness of security controls and report results.
• Educate stakeholders on risk management frameworks and key regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Regulatory frameworks

Education

CRISC

CISA

CISSP

Job description

CVS Health Corporation in Providence, RI seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance programs and audits. You will develop controls, coordinate with IT and business teams, and prepare reports for management, auditors, and regulators.

The role requires 7+ years in IT/security with regulatory expertise, 3+ years with auditors, and relevant certifications (CRISC/CISA/CISSP). Excellent collaboration and communication skills are essential.