Senior Cybersecurity Compliance Leader – Healthcare Audits

CVS Health; Topeka (KS); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will develop controls, coordinate audits, and provide metrics to executives while educating stakeholders on risk and regulatory requirements.

You will partner with Legal, Internal Audit and IT to manage audit requests, remediation plans, and reporting, ensuring timely, compliant operations across CVS Health's enterprise.

Qualifications

• 7+ years of information security/compliance experience.
• 3+ years of experience with auditors/assessors and remediation planning.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years of experience in audit methodologies, internal control frameworks, risk assessments, and control testing.
• Certifications such as CRISC, CISA, or CISSP.

Responsibilities

• Lead procedures to facilitate cybersecurity regulatory audits and compliance activities, with schedules to meet deadlines.
• Develop processes to support regulatory, internal audit, and industry-standard assessments and audits.
• Provide coaching and education on regulatory compliance requirements and best practices.
• Define and develop risk management policies to support technology controls across the enterprise.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, and regulators.
• Oversee audits and assessments to measure the effectiveness of security controls and report results.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & assessments

Risk management

Regulatory frameworks

Regulatory reporting

Education

Bachelor’s degree or equivalent experience

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across the Enterprise Information Security team. You will develop controls, coordinate audits, and provide metrics to executives while educating stakeholders on risk and regulatory requirements.

You will partner with Legal, Internal Audit and IT to manage audit requests, remediation plans, and reporting, ensuring timely, compliant operations across CVS Health's enterprise.