Regulatory Cybersecurity Lead

CVS Health Corporation; Jefferson City (MO); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity incentive

Comprehensive benefits

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will develop controls, coordinate audits, and provide metrics to improve control effectiveness while guiding stakeholders on risk and compliance requirements.

Applicants should have extensive experience with healthcare, retail, or insurance contexts, and hold CRISC/CISA/CISSP certifications.

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory knowledge.
• 3+ years experience with auditors/assessors, inquiries, and remediation plans.
• 3+ years experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.

Responsibilities

• Manages and executes procedures to support cybersecurity regulatory audits and compliance activities.
• Develops efficient processes to facilitate regulatory, internal audit, and industry standard assessments and audits.
• Coaches, provides feedback, and educates stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies and procedures for enterprise technology controls.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure the effectiveness of security controls and reports results to owners.
• Educates key stakeholders on risk management frameworks and top risks related to regulatory compliance.

Skills

Regulatory compliance

Audit management

Risk assessment

Control testing

CRISC

CISA

CISSP

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will develop controls, coordinate audits, and provide metrics to improve control effectiveness while guiding stakeholders on risk and compliance requirements.

Applicants should have extensive experience with healthcare, retail, or insurance contexts, and hold CRISC/CISA/CISSP certifications.