Senior Cybersecurity Compliance Leader

CVS Health Corporation; Trenton (NJ); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across the Enterprise Information Security team. You will guide audits, improve internal controls, and provide metrics on control effectiveness to senior management and regulators.

In this role, you will coordinate with Legal, Internal Audit, and external assessors, define remediation plans, and coach teams on industry practices to ensure regulatory alignment across

Qualifications

• The candidate understands cybersecurity regulations and how controls map to regulatory requirements.
• Experience working with auditors/assessors and coordinating remediation plans.
• Familiarity with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC frameworks.

Responsibilities

• Manages procedures to facilitate cybersecurity regulatory audits and compliance activities, with schedules and deadlines.
• Develops processes to support regulatory, internal audit, and industry standard assessments and audits.
• Coaches stakeholders on regulatory requirements and best practices.
• Defines risk management policies to support technology controls enterprise-wide.
• Oversees preparation and submission of regulatory reports to management, auditors, and regulators.
• Oversees audits to measure security control effectiveness and communicates results to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

InfoSec controls

CRISC / CISA / CISSP

Education

Bachelor's degree or equivalent

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead strategic regulatory compliance initiatives across the Enterprise Information Security team. You will guide audits, improve internal controls, and provide metrics on control effectiveness to senior management and regulators.

In this role, you will coordinate with Legal, Internal Audit, and external assessors, define remediation plans, and coach teams on industry practices to ensure regulatory alignment across