Job Description
Job Description
The Info Security Sr Advisor will work with CVS Health and third-party resources to drive the cyber security maturity of our third parties. This position is accountable for identification and remediation of risks identified through CVS Healths assessment and continuous monitoring of third parties. The position will manage, monitor, and coordinate third party risk activities for assigned business portfolios. The position has no direct reports.
CVS Healths Third-Party Risk Governance team must work directly with CVS Healths business lines and third-party contacts to ensure the appropriate protection of sensitive data. In this role, the successful candidate must have the ability to collaborate and drive resolutions. The successful candidate will find themselves in an environment that recognizes and supports the need to drive change across our third-party portfolio. Candidates should demonstrate:
* Ability to directly or indirectly work with business lines, subject matter experts and other constituents to ensure understanding of key security controls for use of third parties.
* Work with third parties to implement key security controls in accordance with CVS Health Global Security strategy and vision for protection of sensitive data.
* Build and maintain positive relationships with management, team members, and stakeholders across CVS Health using effective written and oral communication practices.
* Possess the ability to influence others using program knowledge, negotiation methods, and be able to overcome objections.
* Partner with other departments and third parties to reduce risks, while supporting/achieving other initiatives
* Possess a foundational understanding of common technology architectures. Will be able to credibly understand high level system architecture and data flow diagrams for the purpose of identifying gaps in disclosure and risk identification.
* Demonstrate knowledge of key regulatory risks and controls for assigned business lines. Understanding of HIPAA/HITECH required, Sarbanes-Oxley and PCI desired.
* Ability to effectively communicate complex Cyber Security issues to non-technical audiences
* Proven track record of driving programs, project, or issues to completion
Required Qualifications
* 5+ years of applicable experience
* Third party (vendor) risk management experience
* IT Risk Management experience
* Excellent verbal and written communication skills
* Strong project management and strategic planning skills
* Technology development and/or Applications/Operational support experience
* Software applications proficiency in ProcessUnity, RSA Archer and MS Office Suite
* Demonstrable ability to recognize the relevance of risk trends, issues and potential risk exposure
Preferred Qualifications
Cloud experience a plus
* Understanding of Cyber Security frameworks such as NIST CSF or ISO 27001
* Understanding of Risk Management (framework knowledge such as COSO, COBIT, NIST RMF, etc)
* ISC(2) or ISACA certification
Education
* Bachelors Degree in IT, computer science or related field required
Business Overview
At CVS Health, we are joined in a common purpose: helping people on their path to better health. We are working to transform health care through innovations that make quality care more accessible, easier to use, less expensive and patient-focused. Working together and organizing around the individual, we are pioneering a new approach to total health that puts people at the heart.
The Info Security Sr Advisor will work with CVS Health and third-party resources to drive the cyber security maturity of our third parties. This position is accountable for identification and remediation of risks identified through CVS Healths assessment and continuous monitoring of third parties. The position will manage, monitor, and coordinate third party risk activities for assigned business portfolios. The position has no direct reports.
CVS Healths Third-Party Risk Governance team must work directly with CVS Healths business lines and third-party contacts to ensure the appropriate protection of sensitive data. In this role, the successful candidate must have the ability to collaborate and drive resolutions. The successful candidate will find themselves in an environment that recognizes and supports the need to drive change across our third-party portfolio. Candidates should demonstrate:
* Ability to directly or indirectly work with business lines, subject matter experts and other constituents to ensure understanding of key security controls for use of third parties.
* Work with third parties to implement key security controls in accordance with CVS Health Global Security strategy and vision for protection of sensitive data.
* Build and maintain positive relationships with management, team members, and stakeholders across CVS Health using effective written and oral communication practices.
* Possess the ability to influence others using program knowledge, negotiation methods, and be able to overcome objections.
* Partner with other departments and third parties to reduce risks, while supporting/achieving other initiatives
* Possess a foundational understanding of common technology architectures. Will be able to credibly understand high level system architecture and data flow diagrams for the purpose of identifying gaps in disclosure and risk identification.
* Demonstrate knowledge of key regulatory risks and controls for assigned business lines. Understanding of HIPAA/HITECH required, Sarbanes-Oxley and PCI desired.
* Ability to effectively communicate complex Cyber Security issues to non-technical audiences
* Proven track record of driving programs, project, or issues to completion
Required Qualifications
* 5+ years of applicable experience
* Third party (vendor) risk management experience
* IT Risk Management experience
* Excellent verbal and written communication skills
* Strong project management and strategic planning skills
* Technology development and/or Applications/Operational support experience
* Software applications proficiency in ProcessUnity, RSA Archer and MS Office Suite
* Demonstrable ability to recognize the relevance of risk trends, issues and potential risk exposure
Preferred Qualifications
Cloud experience a plus
* Understanding of Cyber Security frameworks such as NIST CSF or ISO 27001
* Understanding of Risk Management (framework knowledge such as COSO, COBIT, NIST RMF, etc)
* ISC(2) or ISACA certification
Education
* Bachelors Degree in IT, computer science or related field required
Business Overview
At CVS Health, we are joined in a common purpose: helping people on their path to better health. We are working to transform health care through innovations that make quality care more accessible, easier to use, less expensive and patient-focused. Working together and organizing around the individual, we are pioneering a new approach to total health that puts people at the heart.
We strive to promote and sustain a culture of diversity, inclusion and belonging every day. CVS Health is an equal opportunity and affirmative action employer. We do not discriminate in recruiting, hiring or promotion based on race, ethnicity, sex/gender, sexual orientation, gender identity or expression, age, disability or protected veteran status or on any other basis or characteristic prohibited by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.
70627619