Senior Analyst – Security Risk Management

CVS Health

. Develop reports, evaluate vendor assessment results, and identify and document control gaps .

Posted 11/4/2026full-timeRemote • North Carolina • United StatesSenior💰 $64,890 - $129,780 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in risk assessment methodologies and compliance with regulatory requirements such as PCI, SOX, and HIPAA. Proficient in conducting vulnerability assessments, managing third-party security programs, and communicating effectively with stakeholders.

Highest-signal resume keywords

Risk Assessment MethodologiesInformation Security FrameworksCISSP CertificationVulnerability Testing ToolsRegulatory Compliance Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk MetricsVulnerability AssessmentPenetration TestingInformation Security PoliciesSecurity Due DiligenceSource Code ReviewsNetwork-Level Penetration TestingCyber Security Risk AssessmentRisk Management ProcessesControl Gap Identification

Soft Skills

Interpersonal CommunicationOral CommunicationWritten CommunicationRelationship Building

Tools & Technologies

Vulnerability Testing ToolsAutomated Code Review Tools

Certifications & Qualifications

CISSPCISACIPPCISMPCIPISACTPRA

Industry Keywords

PCI ComplianceSOX ComplianceHIPAA ComplianceISO 27001NIST CSFHealthcare SecurityRegulated EnvironmentThird-Party SecurityInformation Risk AnalysisSecurity Awareness Training

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop reports, evaluate vendor assessment results, and identify and document control gaps
Review and interpret results of vulnerability assessments and penetration testing
Conduct and support risk assessments, including risk metrics and visualization, and identify and prioritize risks based on impact and likelihood
Participate in information security assessments to ensure compliance with applicable regulatory requirements, including PCI, SOX, PII, and PHI
Partner with key business leaders to facilitate information risk analysis, establish acceptable levels of risk, and support risk management processes
Communicate with auditors and regulators during compliance and regulatory reviews and help minimize risk and audit findings
Collaborate with peers to ensure operational excellence and assist with policy and standard development, security awareness, and training
Execute the Third-Party Security (TPS) program and serve as a key contact for enterprise participants
Ensure security due diligence is performed for third parties with access to CVS data and/or the CVS environment
Identify, assess, document, and communicate information security risks
Partner with business and security stakeholders to support effective risk management and remediation activities

Requirements

What you’ll need

2+ years of experience in an IT Security/IT Risk environment with a large regulated organization
Knowledge of risk assessment methodologies, IT/IS Policies and Standards, IT risk standards and industry best practices (ISO 27001, HITRUST, etc.)
Previous cyber security risk assessment within Healthcare, or other highly regulated environment
One or more of the following certifications: CISSP, CISA, CIPP, CISM, PCIP, ISA, CTPRA
Experience with regulatory requirements, including Sarbanes Oxley, HIPAA, and the PCI-DSS
Knowledge and working experience with Information Security frameworks, including ISO27001 and the NIST CSF
Strong interpersonal and oral/written communication skills, able to build relationships at all levels
Knowledge of web application security testing and vulnerability testing tools
Knowledge of network-level penetration testing
Knowledge of source code reviews using automated tool
Bachelor’s degree in Information/Cyber Security, or a related field, or equivalent experience (High School diploma + 4 years of relevant experience)

Benefits

Comp & perks

Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being
CVS Health bonus, commission or short-term incentive program in addition to base pay