Regulatory Cybersecurity Compliance Lead

9025 CVS Shared Services Resources LLC; Rhode Island; Hybrid; USD 107.000 - 284.000; Vollzeit

Zusammenfassung

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, develop controls, and partner with Legal, Internal Audit, and external assessors to ensure alignment with HIPAA, PCI, and other frameworks.

The role emphasizes risk-based control optimization, policy development, and cross-functional collaboration across IT and business teams in a large healthcare environment.

Qualifikationen

• 7+ years of experience in information technology or information security with deep understanding of regulations and implications for cybersecurity controls.
• 3+ years of experience working with auditors/assessors, formulating responses and remediation plans.
• 3+ years of experience in applicable regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years of experience in audit methodologies, internal controls, risk assessments and control testing techniques.

Aufgaben

• Manages and executes procedures to facilitate cybersecurity regulatory audits and compliance activities, establishing schedules and plans to meet deadlines.
• Develops processes to facilitate regulatory, internal audit, and industry-standard assessments and audits.
• Provides coaching and education to stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies and procedures to support technology controls across the enterprise.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure the effectiveness of security controls and communicates results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Kenntnisse

Regulatory compliance knowledge

Auditor liaison

Regulatory risk management

Ausbildung

CRISC

CISA

CISSP

Jobbeschreibung

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, develop controls, and partner with Legal, Internal Audit, and external assessors to ensure alignment with HIPAA, PCI, and other frameworks.

The role emphasizes risk-based control optimization, policy development, and cross-functional collaboration across IT and business teams in a large healthcare environment.