Senior Cybersecurity Compliance Leader - Reg & Audits

CVS Health; Atlanta (GA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across Enterprise Information Security. You will guide audits, develop controls, and provide metrics on control effectiveness.

You will educate stakeholders, manage remediation, and coordinate with Legal, Internal Audit, and external assessors to align the program with standards such as HIPAA, PCI, NIST, and ISO.

Qualifications

• 7+ years of experience in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years of experience with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years of audit methodologies and risk assessment.
• CRISC, CISA, or CISSP certification.

Responsibilities

• Lead and execute procedures to facilitate cybersecurity regulatory audits and compliance activities, setting schedules to meet deadlines.
• Develop processes to support regulatory, internal audit, and industry assessments and audits.
• Provide coaching to stakeholders on regulatory requirements and best practices.
• Define risk management policies to support enterprise controls.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Educate stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audits & responses

Risk management

CRISC

CISA

CISSP

Education

Bachelor’s degree

Job description

CVS Health is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across Enterprise Information Security. You will guide audits, develop controls, and provide metrics on control effectiveness.

You will educate stakeholders, manage remediation, and coordinate with Legal, Internal Audit, and external assessors to align the program with standards such as HIPAA, PCI, NIST, and ISO.