Senior Cybersecurity Compliance Leader

CVS Health; Madison (WI); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance activities. You will guide audits, develop controls, and provide metrics to measure control effectiveness across the organization.

The role partners with Legal, Internal Audit, and regulators to align the program with evolving requirements. Responsibilities include managing audit readiness, implementing risk-based policies, and coordinating remediation with process owners.

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations for cybersecurity controls.
• 3+ years of experience working with auditors/assessors, managing inquiries and remediation plans.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years of experience in audit methodologies, internal controls, risk assessments, and testing techniques.
• Professional certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Manages and executes procedures to facilitate cybersecurity regulatory audits and compliance activities, with schedules and deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coaches stakeholders on regulatory requirements and industry best practices.
• Defines and develops risk management policies to support technology controls across the enterprise.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, and regulators.
• Oversees audits and assessments to measure security controls and reports results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Auditing coordination

Risk management

Communication

Education

CRISC certification

CISA certification

CISSP certification

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance activities. You will guide audits, develop controls, and provide metrics to measure control effectiveness across the organization.

The role partners with Legal, Internal Audit, and regulators to align the program with evolving requirements. Responsibilities include managing audit readiness, implementing risk-based policies, and coordinating remediation with process owners.