Security Risk Management Analyst - Remote

Overview

The Security Risk Management Analyst at CVS Health will represent the company's information security practices and provide support to clients by navigating complex security assurance relationships.

In Short

• Support clients in security assurance relationships.
• Respond to RFI/P requests and third-party risk management questionnaires.
• Update client-facing security materials based on industry trends.
• Partner with technology and business account teams.
• Maintain knowledge of information security policies and procedures.
• Evaluate security risks and technical control implementations.
• Work independently and take initiative.
• Communicate effectively with clients and teams.
• Possess strong interpersonal skills.
• Execute on assigned tasks efficiently.

Requirements

• 2-5 years of experience in Security Audit Management or related fields.
• 2+ years working with security frameworks like NIST 800-53 and HIPAA.
• Knowledge of regulatory standards and audit frameworks.
• Experience in a client-facing security role.
• Strong skills in control evaluation and testing.
• Ability to understand security legal terminology.
• Self-starter with the ability to collaborate across teams.
• Bachelor's Degree or equivalent experience.

Benefits

• Competitive pay and comprehensive benefits.
• 401(k) with company matching contributions.
• No-cost wellness programs and counseling services.
• Flexible work schedules and paid time off.
• Tuition assistance and family leave options.
• Employee stock purchase plan.
• Retiree medical access.
• Support for different needs and preferences of colleagues.