Senior Cybersecurity Compliance Leader

CVS Health Corporation; Olympia (WA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

Paid time off

Retirement savings

Wellness programs

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Enterprise Information Security team. The role focuses on developing, implementing, and managing controls, procedures, and reporting to meet regulatory requirements and support audits.

You will collaborate with IT, Legal, Internal Audit, and external assessors to educate on risk and measure control effectiveness, guiding process owners through audits and

Qualifications

• 7+ years of experience in information technology or information security with a deep understanding of regulations and cybersecurity controls.
• 3+ years working with auditors/assessors, responses, inquiries, and remediation planning.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.

Responsibilities

• Manages and executes procedures to support cybersecurity regulatory audits and compliance activities with deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coaches stakeholders on regulatory compliance requirements and best practices.
• Defines and develops risk management policies to support technology controls across the enterprise.
• Oversees submission of regulatory reports to management, auditors, assessors, and regulators.
• Oversees audits and assessments to measure security control effectiveness and reports results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Risk management

Auditing

Regulatory frameworks

Education

CRISC

CISA

CISSP

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives within the Enterprise Information Security team. The role focuses on developing, implementing, and managing controls, procedures, and reporting to meet regulatory requirements and support audits.

You will collaborate with IT, Legal, Internal Audit, and external assessors to educate on risk and measure control effectiveness, guiding process owners through audits and