Senior Cybersecurity Compliance Manager

CVS Health Corporation; Concord (NH); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Retirement savings options

Paid time off

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives within Enterprise Information Security. You will guide regulatory assessments, implement controls, and coordinate audits across the enterprise while collaborating with Legal, Internal Audit and external assessors.

Ideal candidates have extensive experience in healthcare/regulatory environments and a track record of improving control effectiveness, reporting, and risk

Qualifications

• 7+ years in information technology or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation plans.
• 3+ years in regulations, standards and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal control frameworks, risk assessments, and control testing.

Responsibilities

• Lead and execute procedures to support cybersecurity regulatory audits and compliance activities.
• Develop efficient processes for regulatory, internal audit, and industry standard assessments and audits.
• Provide coaching on regulatory requirements and industry best practices to stakeholders.
• Define and develop risk management policies to support technology controls across the enterprise.
• Oversee preparation and submission of regulatory compliance reports to management, auditors and regulators.
• Oversee audits and assessments to measure security control effectiveness and report findings.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks (FTC, HIPAA, NY-

Regulatory reporting

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives within Enterprise Information Security. You will guide regulatory assessments, implement controls, and coordinate audits across the enterprise while collaborating with Legal, Internal Audit and external assessors.

Ideal candidates have extensive experience in healthcare/regulatory environments and a track record of improving control effectiveness, reporting, and risk