Sr. Analyst, IT Security Compliance

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Position Summary
As a member of the Enterprise Delivery & PCW Compliance team this resource will support tracking and oversight of risk-based vulnerabilities aligned to the Enterprise Delivery and PCW application portfolio. Accountabilities include vulnerability reporting, maintaining insights into remediation plans, monitoring enterprise-wide Vulnerability Management Program priorities, as well as supporting application managers with process / procedures within the Vulnerability Management Program space. They will interact closely with our management team, other compliance domain leads, application teams, and key members of the corporate-wide Information Security team. They will serve as an instrumental resource to help maintain focus on the overall security compliance support posture for our area.

Responsibilities

• Provide support to other members of our team & key stakeholders by maintaining line of sight into risk exposure, workload, priorities, and timelines
• Ensure data integrity and accuracy of vulnerability data within our tools
• Maintain remediation status updates as needed for our application teams
• Gather, organize, validate information required for the submission of Archer Findings.
• Handle administrative tasks as needed in support of our various vulnerability programs.
• Provide guidance and support services to application teams through the development and continuous improvement of communications, job-aids, and support frameworks
• Serve as a backup resource for members of our Vulnerability Management support team
• Assist with coordination & tracking of new, emerging compliance priorities.

Required Qualifications

• Previous work experience in Application Development, Project Management, Information Security, or a related IT practice field.
• Demonstrated understanding of the processes for the design, development, testing and implementation of application software
• Strong proficiency in MS Excel, data analysis, and related formula, lookup functions
• Results-oriented, self-directed
• Demonstrated versatility and ability to handle concurrent high priority tasks
• Solid organizational and analytical skills
• Strong written and oral communication skills
• Ability to work effectively across a variety of functional IT and business areas
• 3+ years of relevant experience

Preferred Qualifications

• Knowledge of IT security and compliance best practices and theory
• Exposure to Qualys scanning, SAST, DAST, Open Source, Container scanning, or related vulnerability scanning / monitoring tools
• Security certifications such as CISSP, CISA, CRISC, CISM, Security Plus, etc.
• Knowledge of IT security-related regulations such as HIPAA, SOX, SOC1, SOC2, HITRUST, etc.

Education

• Bachelor’s degree in relevant business area or BS degree from an accredited pharmacy college or university – or equivalent years of experience.

Anticipated Weekly Hours

40

Time Type

Full time

Pay Range

The typical pay range for this role is:

$79,310.00 - $158,620.00

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

• Affordable medical plan options,