Senior Cybersecurity Compliance Leader

CVS Health Corporation; Topeka (KS); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus potential

Equity awards

Comprehensive benefits

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance across the Enterprise Information Security team. You will guide audits, develop controls, and partner with Legal, Internal Audit and IT to ensure effective risk management.

The role emphasizes educating stakeholders on regulatory requirements, coordinating remediation plans, and delivering actionable metrics on control effectiveness in a large healthcare and retail environment.

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory knowledge.
• 3+ years of experience working with auditors/assessors, managing inquiries, and remediation plans.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessments, and control testing.
• Certifications such as CRISC, CISA, CISSP are preferred.

Responsibilities

• Manages and executes procedures to facilitate regulatory audits and compliance activities with schedules and deadlines.
• Develops processes to support regulatory, internal audits, and industry standard assessments.
• Provides coaching and education to stakeholders on regulatory requirements and best practices.
• Defines and develops risk management policies to support enterprise technology controls.
• Oversees preparation and submission of regulatory compliance reports to management, auditors, and regulators.
• Monitors audits to measure control effectiveness and reports results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Regulatory frameworks knowledge

Communication skills

Education

CRISC/CISA/CISSP certifications

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance across the Enterprise Information Security team. You will guide audits, develop controls, and partner with Legal, Internal Audit and IT to ensure effective risk management.

The role emphasizes educating stakeholders on regulatory requirements, coordinating remediation plans, and delivering actionable metrics on control effectiveness in a large healthcare and retail environment.