Senior Cybersecurity Compliance Lead — Regulatory Audits

CVS Health Corporation; Little Rock (AR); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, coordinate with Legal, Internal Audit, and external assessors, and drive risk-based controls across the organization.

The role requires deep knowledge of multiple frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC) and experience managing complex regulatory programs in healthcare/retail environments. Competitive benefits apply.

Qualifications

• 7+ years of IT or information security experience with regulatory controls.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies and control testing.
• CRISC, CISA, or CISSP certifications are preferred.

Responsibilities

• Manages procedures to support cybersecurity regulatory audits and compliance activities, scheduling and meeting deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coaches stakeholders on regulatory compliance requirements and best practices.
• Defines risk management policies to support technology controls enterprise-wide.
• Oversees preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversees audits to measure control effectiveness and communicates results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Regulatory frameworks

Communication

Program management

Regulatory certifications

Education

Bachelor's degree or equivalent

Tools

CRISC

CISA

CISSP

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives. You will guide audits, coordinate with Legal, Internal Audit, and external assessors, and drive risk-based controls across the organization.

The role requires deep knowledge of multiple frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC) and experience managing complex regulatory programs in healthcare/retail environments. Competitive benefits apply.