Senior Cybersecurity Compliance Strategist

CVS Health Corporation; Jackson (MS); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation in the United States seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives, guide audits, and enhance controls across the IT organization.

You will partner with Legal, Internal Audit, and external assessors, educate stakeholders on risk frameworks, and drive remediation plans to meet federal and state requirements. This role coordinates audits and reports to regulators in a complex healthcare/retail environment.

Qualifications

• 7+ years in information technology or information security with deep regulatory knowledge.
• 3+ years working with auditors/assessors and remediation planning.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years in audit methodologies, control testing and risk assessments.
• CRISC, CISA, or CISSP certification.

Responsibilities

• Manages procedures to support cybersecurity regulatory audits and compliance activities with deadlines.
• Develops processes to support regulatory, internal audits and industry assessments.
• Coaches stakeholders on regulatory requirements and best practices.
• Defines risk management policies for technology controls across the enterprise.
• Oversees submission of regulatory reports to management, auditors and regulators.
• Tracks audit results and assigns remediation to owners.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Stakeholder communication

CRISC/CISA/CISSP

Education

Bachelor's degree

Job description

CVS Health Corporation in the United States seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives, guide audits, and enhance controls across the IT organization.

You will partner with Legal, Internal Audit, and external assessors, educate stakeholders on risk frameworks, and drive remediation plans to meet federal and state requirements. This role coordinates audits and reports to regulators in a complex healthcare/retail environment.