Senior Manager, Cybersecurity Compliance & Risk

CVS Health Corporation; Raleigh (NC); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Paid time off

Retirement savings

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives across IT and business units. You will guide audits, define risk management policies, and coordinate with Legal, Internal Audit, and external assessors to ensure robust control environments.

The role requires deep regulatory knowledge (FTC, HIPAA, SOX, PCI, NIST, ISO, HITRUST), strong risk assessment skills, and experience in managing remediation plans.

Qualifications

• 7+ years of experience in IT or information security with regulatory knowledge.
• 3+ years working with auditors/assessors and remediation plans.
• 3+ years in FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC regulatory scopes.
• 3+ years in audit methodologies, internal controls, risk assessments, and control testing.
• CRISC, CISA, or CISSP certification preferred.

Responsibilities

• Manages and executes procedures to facilitate regulatory audits and compliance activities, with schedules and milestones.
• Develops processes to support regulatory, internal audit, and industry-standard assessments and audits.
• Coaches stakeholders on regulatory requirements and industry best practices.
• Defines and develops risk management policies and procedures for technology controls.
• Oversees preparation and submission of regulatory compliance reports to management, auditors and regulators.
• Educates stakeholders on risk management frameworks and top regulatory risks.

Skills

Regulatory compliance

Audit coordination

Risk management

Regulatory frameworks

Stakeholder communication

Project management

Education

Bachelor's degree or equivalent experience

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead enterprise regulatory compliance initiatives across IT and business units. You will guide audits, define risk management policies, and coordinate with Legal, Internal Audit, and external assessors to ensure robust control environments.

The role requires deep regulatory knowledge (FTC, HIPAA, SOX, PCI, NIST, ISO, HITRUST), strong risk assessment skills, and experience in managing remediation plans.