Senior Cybersecurity Compliance Manager

CVS Health Corporation; Boston (MA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus program

Equity awards

Job summary

The Senior Manager of Cybersecurity Compliance at CVS Health will lead strategic regulatory compliance initiatives across the Enterprise Information Security team, guiding assessments, remediation, and reporting to meet applicable rules.

You will collaborate with IT and business partners to educate on risk, provide actionable metrics, and coordinate audits with internal and external stakeholders to strengthen control effectiveness.

Qualifications

• 7+ years in information technology or information security with deep regulatory knowledge
• 3+ years working with auditors/assessors, handling inquiries and remediation plans
• 3+ years in regulatory standards (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC)
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing
• Professional certifications: CRISC, CISA, or CISSP

Responsibilities

• Manages procedures to support cybersecurity regulatory audits and compliance activities with deadlines
• Develops processes for regulatory, internal audit, and industry-standard assessments
• Coaches stakeholders on regulatory requirements and industry best practices
• Defines risk management policies to support technology controls
• Oversees submission of regulatory compliance reports to management, auditors, and regulators
• Educates stakeholders on risk frameworks and top regulatory risks

Skills

Audits

Regulatory compliance

Risk assessment

Internal controls

Regulatory frameworks

Regulatory audits

Stakeholder education

Education

Bachelor's degree or equivalent experience

Job description

The Senior Manager of Cybersecurity Compliance at CVS Health will lead strategic regulatory compliance initiatives across the Enterprise Information Security team, guiding assessments, remediation, and reporting to meet applicable rules.

You will collaborate with IT and business partners to educate on risk, provide actionable metrics, and coordinate audits with internal and external stakeholders to strengthen control effectiveness.