Cybersecurity Corporate Audit Manager

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care. As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues—caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate.

And we do it all with heart, each and every day.

We are looking for a cybersecurity auditor with auditing, risk, or compliance background, preferably with a focus on healthcare. The candidate will lead cybersecurity audits, as well as serve as the cybersecurity consultant on other audit projects within Internal Audit. Lead audit teams in an independent internal review of security controls and information systems which includes testing the safety and effectiveness of individual components of cybersecurity defenses.

Responsible for designing and executing cybersecurity audits, establishing audit objectives, and assessing the overall structure of the business' systems. Must be proficient in providing written and oral reports on audit findings and understanding how to assess risk based on mitigating and compensating controls. Preferred areas of cybersecurity knowledge to include cloud security (Azure & GCP), network security, data security, application security, system administration, vendor and 3rd party security, ransomware, vulnerability management and security testing tools.

• Confers with various teams, such as IT, compliance, legal, and executive leadership regarding security risks/gaps and remediation strategies.
• Possess an innovative & creative mindset to adopt analytical technology to enhance audit techniques such as data analytics and AI tools.
• Able to build relationships across the CVS Digital, Data & Analytics and Technology teams and evolve & thrive in a fast‑paced environment.
• Provides training and knowledge sharing across Internal Audit about security risks, best practices, and their roles in identifying gaps.
• Proven ability to network with other information security specialists to stay up to date with the latest trends, tools, and techniques in cybersecurity auditing internally to CVS and externally for industry best practices.

• 5+ years of experience in information security with a focus on cybersecurity controls.
• 3+ years of experience in audit methodologies, internal control frameworks, and risk assessments.
• 3+ years of experience in relevant regulations, standards, and frameworks such as NIST and 5C framework of cybersecurity.
• At least 1 certification related to Information Security such as CISA, CRISC, CISM, CISSP, or other industry audit, compliance, or cybersecurity certification.

• Experience in a large and complex environment related to healthcare, insurance, or retail.
• Proven ability to lead audit teams on complex engagements.
• Strong written and verbal communication skills, with the ability to articulate cyber-security risks clearly and concisely.
• Analytical and problem‑solving skills, with the ability to assess risks effectively and make informed remediation requests on gaps identified.
• Working knowledge of HIPAA, ISO, FTC, PCI DSS, NY DFS, NAIC, SOX, and HITRUST.
• Demonstrated ability to collaborate across departments, build relationships with key stakeholders, and influence others to achieve internal audit objectives.
• Experience managing or contributing to audit and assessment projects, with a focus on cybersecurity.

• Bachelor's degree or a related field or equivalent (HS Diploma and 4 years of experience) required

40

Full time

The typical pay range for this role is:

$ - $

This pay range represents the base hourly rate or base annual full‑time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS…