Senior Cybersecurity Compliance Lead - Audits & Controls

CVS Health; Montpelier (VT); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Wellness programs

Equity award program

Bonus eligibility

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise-wide regulatory programs and coordinate with Legal, Internal Audit, and external assessors. You will guide risk-based controls, prepare submissions, and drive remediation efforts across IT and business units.

You have substantial experience with HIPAA, PCI, SOX, NIST, and related frameworks, and you’ll educate stakeholders, measure control effectiveness, and ensure audits stay on track in a complex healthcare

Qualifications

• 7+ years of experience in information technology or information security related with a deep understanding of regulations, including requirements and implications for cybersecurity controls.
• 3+ years of experience working with auditors and/or assessors, formulating responses, managing inquiries, and designing/overseeing remediation plans as necessary.
• 3+ years of experience relevant regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, and NAIC).
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessments, and control testing techniques.
• Relevant professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Manages and executes procedures to facilitate and support various cybersecurity regulatory audits and compliance activities, establishing schedules and plans to ensure deadlines are met.
• Develops efficient processes to facilitate and support regulatory, internal audit, and industry standard assessments and audits.
• Provides coaching, feedback, and education to stakeholders and colleagues on regulatory compliance requirements and industry best practices.
• Defines and develops risk management policies and procedures to support the implementation of technology controls across the enterprise.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure the effectiveness of security controls, providing results back to the responsible party/owner.
• Educates key stakeholders on risk management frameworks and top risks related to regulatory compliance.

Skills

Regulatory compliance

Audits liaison

Risk management

Stakeholder communication

Information security

Education

Bachelor's degree or equivalent

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise-wide regulatory programs and coordinate with Legal, Internal Audit, and external assessors. You will guide risk-based controls, prepare submissions, and drive remediation efforts across IT and business units.

You have substantial experience with HIPAA, PCI, SOX, NIST, and related frameworks, and you’ll educate stakeholders, measure control effectiveness, and ensure audits stay on track in a complex healthcare