Senior Cybersecurity Compliance & Audit Lead

CVS Health; Cheyenne (WY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental & Vision coverage

Paid time off

Retirement savings plan

Wellness programs

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide assessments, manage controls, and coordinate audits with stakeholders, auditors, and regulators.

The role requires strong expertise in regulatory frameworks, risk management, and cross-functional collaboration with Legal, Internal Audit, and business teams to ensure timely, accurate reporting and continuous improvement of

Qualifications

• 7+ years of experience in information technology or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, risk assessments, and control testing.
• Certifications such as CRISC, CISA, or CISSP are preferred.

Responsibilities

• Lead procedures to support cybersecurity regulatory audits and plan deadlines.
• Develop processes for regulatory and internal audits and assessments.
• Coach stakeholders on compliance requirements and best practices.
• Define risk management policies for enterprise technology controls.
• Oversee submission of regulatory reports and audit results.
• Educate stakeholders on risk frameworks and regulatory top risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Stakeholder communication

Regulatory frameworks

Education

Bachelor's degree or equivalent

CRISC certification

CISA certification

CISSP certification

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will guide assessments, manage controls, and coordinate audits with stakeholders, auditors, and regulators.

The role requires strong expertise in regulatory frameworks, risk management, and cross-functional collaboration with Legal, Internal Audit, and business teams to ensure timely, accurate reporting and continuous improvement of