Information Security Client Assurance – Senior Manager

As the Senior Manager of Information Security Client Assurance on our team you will be responsible for leading the external facing Information Security Client Assurance function for all CVS Health business lines.
This position provides extraordinary support to our clients and will navigate complex client security assurance relation issues to both win/retain business and protect CVS Health. Maintaining our client’s trust through demonstration of our information security practices is our top priority. You will do this by partnering with business account teams, bids & proposals, legal & privacy to support Request for Information/Proposal (RFI/P) responses, client third party risk management assessments, contractual compliance reviews, complex security schedule negotiation, and end-to-end deal support process management with accountability to executive information security leadership.
As one of our team’s leaders you will be continually positioned to meet or exceed our client expectations regarding our security posture with a focus upon stellar customer service. The team will maintain a current knowledge base for all information security policies, standards, procedures and practices to accurately represent CVS Health’s information security posture as part of our Trust Center. Identify process improvements to reduce overall time to provide client assurance services to business lines. Educate internal technology leadership and business lines regarding negotiated security schedule obligations. Develop and mature program to position our information security practices as a buying differentiator with clients.

Pay Range
The typical pay range for this role is:
Minimum: 95,000
Maximum: 209,000

Please keep in mind that this range represents the pay range for all positions in the job grade within which this position falls. The actual salary offer will take into account a wide range of factors, including location.

Required Qualifications

• 8+ years of information security or related experience.
• 3+ years of personnel management.
• 2+ years of experience with security controls and alignment to key regulations (NIST, ISO, HITRUST, HIPAA, PCI).

COVID Requirements

COVID-19 Vaccination Requirement
CVS Health requires certain colleagues to be fully vaccinated against COVID-19 (including any booster shots if required), where allowable under the law, unless they are approved for a reasonable accommodation based on disability, medical condition, religious belief, or other legally recognized reasons that prevents them from being vaccinated.

You are required to have received at least one COVID-19 shot prior to your first day of employment and to provide proof of your vaccination status or apply for a reasonable accommodation within the first 10 days of your employment. Please note that in some states and roles, you may be required to provide proof of full vaccination or an approved reasonable accommodation before you can begin to actively work.

Preferred Qualifications
Knowledge of:

• Negotiations of Legal Data Security Schedules, Data Protection Agreements and Business Associate Agreements Security terms.
• Operating a public facing Trust Center, with associated supporting marketing materials.
• Cloud Security Control frameworks.
• Working alongside sales or account management. functions, supporting RFI/Ps, Assessments/Audits or contract negotiations.

Skill in:

• Strong interpersonal and collaboration skills.
• Strong communication skills.
• Risk analysis.
• Project consultation and advising.

Ability To:

• Worked independently.
• Understand technical security control language to offer alternative language within legal security schedules.
• Collaborate across many teams.
• Lead design program frameworks.
• Provide timely feedback to staff related to their performance.
• Foster a culture of career development and growth.
• Previous experience in a client facing security role, third party risk management or Information Security controls assurance function.

Education
Bachelors Degree or Equivalent Work Experience.

Business Overview
Bring your heart to CVS Health Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver. Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable. We strive to promote and sustain a culture of diversity, inclusion and belonging every day. CVS Health is an affirmative action employer, and is an equal opportunity employer, as are the physician-owned businesses for which CVS Health provides management services. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.