Regulatory Cybersecurity Compliance Lead — Audit Focus

CVS Health; Rhode Island; Hybrid; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards program

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will build and manage controls, reporting, and processes to support audits and regulatory actions, with collaboration across IT, Legal, Internal Audit, and external assessors.

The role emphasizes risk-based guidance, coordination of audit activities, and educating stakeholders on regulatory requirements and industry best practices to strengthen security controls across the

Qualifications

• 7+ years in information technology or information security with deep regulatory knowledge.
• 3+ years working with auditors/assessors and managing remediation plans.
• 3+ years in relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing.
• CRISC, CISA, or CISSP certifications.

Responsibilities

• Lead and execute strategic regulatory compliance initiatives across the enterprise.
• Develop and manage procedures, controls, and reporting for compliance.
• Educate stakeholders on regulatory requirements and best practices.
• Define risk management policies to support technology controls.
• Oversee regulatory reports to management, auditors, and regulators.
• Coordinate audits and assessments to measure control effectiveness.
• Collaborate with senior management, Legal, Internal Audit and external assessors.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Education

Bachelor's degree or equivalent

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will build and manage controls, reporting, and processes to support audits and regulatory actions, with collaboration across IT, Legal, Internal Audit, and external assessors.

The role emphasizes risk-based guidance, coordination of audit activities, and educating stakeholders on regulatory requirements and industry best practices to strengthen security controls across the