Strategic Cybersecurity Compliance Lead

CVS Health Corporation; Columbia (SC); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity awards

Job summary

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across Enterprise Information Security. You will guide audits, develop controls, and provide metrics to measure control effectiveness, collaborating with Legal, Internal Audit, and external assessors.

You will educate stakeholders on risk management frameworks and drive remediation efforts, aligning with corporate governance and industry best practices.

Qualifications

• 7+ years of experience in information technology or information security with deep regulatory understanding and cybersecurity controls.
• 3+ years working with auditors/assessors, handling inquiries and remediation plans.
• 3+ years in regulations, standards, and frameworks (FTC, HIPAA, NY DFS, SOX, PCI, NIST, ISO, HITRUST, NAIC).
• 3+ years in audit methodologies, internal controls, risk assessments, and control testing techniques.
• CRISC, CISA, or CISSP certification preferred.

Responsibilities

• Manage and execute procedures to support cybersecurity regulatory audits and compliance activities, with schedules and deadlines.
• Develop efficient processes for regulatory, internal audit, and industry standard assessments and audits.
• Coach and educate stakeholders on regulatory compliance requirements and best practices.
• Define and develop risk management policies and procedures for enterprise technology controls.
• Oversee preparation and submission of regulatory compliance reports to management, auditors, assessors, and regulators.
• Oversee audits and assessments to measure security controls' effectiveness and report results.

Skills

Regulatory compliance

Audits & assessments

Security controls

CRISC/CISA/CISSP

Communication

Education

Bachelor’s degree

Job description

CVS Health Corporation seeks a Senior Manager of Cybersecurity Compliance to lead regulatory compliance initiatives across Enterprise Information Security. You will guide audits, develop controls, and provide metrics to measure control effectiveness, collaborating with Legal, Internal Audit, and external assessors.

You will educate stakeholders on risk management frameworks and drive remediation efforts, aligning with corporate governance and industry best practices.