Senior Manager, Cybersecurity Compliance & Regulatory Risk

CVS Health Corporation; Sacramento (CA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance, drive audits, and coordinate with internal and external stakeholders to strengthen controls.

The role focuses on developing policies, managing remediation efforts, and educating teams on risk frameworks, with collaboration across Legal, Internal Audit, and IT to ensure regulatory alignment.

Qualifications

• 7+ years in IT or information security with regulatory knowledge.
• 3+ years coordinating with auditors and handling inquiries.
• 3+ years with FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC.
• 3+ years of audit methods, risk assessments, and control testing.

Responsibilities

• Lead procedures to support cybersecurity regulatory audits and deadlines.
• Develop processes for regulatory, internal audits and standard assessments.
• Coach stakeholders on regulatory requirements and best practices.
• Define risk management policies for technology controls.
• Oversee regulatory reports to management, auditors, and regulators.
• Oversee audits to measure security control effectiveness.
• Educate stakeholders on risk frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Cybersecurity controls

Risk management

CRISC/CISA/CISSP

Regulatory frameworks

Communication

Education

Bachelor's degree

Job description

CVS Health Corporation is seeking a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance, drive audits, and coordinate with internal and external stakeholders to strengthen controls.

The role focuses on developing policies, managing remediation efforts, and educating teams on risk frameworks, with collaboration across Legal, Internal Audit, and IT to ensure regulatory alignment.