Senior Manager - Information Security (Zero Trust)

CVS Health

About The Position

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Manager – Zero Trust is a senior management position charged with directing and overseeing the strategy, engineering, operations, and execution of processes related to Zero Trust technologies within the Cybersecurity Workstation Assurance organization. This role involves leading a dedicated team of security engineers, managing the implementation and maintenance of Zero Trust solutions, and ensuring the security and integrity of sensitive data throughout enterprise systems. The Senior Manager collaborates closely with IT, security, compliance, and various business units to guarantee that secure remote access and data protection policies and procedures are closely aligned with organizational objectives and regulatory standards. We are seeking a collaborative and technically skilled professional to provide engineering support for our Zero Trust infrastructure across a large enterprise environment. This individual will work closely with the Director, developers, application owners, and the security team to design, implement, and support Zero Trust solutions that meet the needs of the organization.

Requirements

5+ years of experience in Data and Cloud security domains.
3+ years of experience in Zero Trust tools like Zscaler.
3+ years of experience with managing a security operations team in large-scale, complex environments.
Experience with data security and privacy regulatory compliance frameworks and standards such as PCI, HIPAA, NIST, FIPS 140-2, GDPR, CCPA.
Proficiency in network security technologies including firewalls, VPNs, IDS/IPS, and IAM solutions.
Passionate understanding and working knowledge of data protection fundamentals and risk -based approach to information security.
Bachelor degree from accredited university or equivalent work experience (HS diploma + 4 years relevant experience)

Nice To Haves

Strong leadership and team management skills, with the ability to motivate, mentor, and develop staff.
Continuous improvement mindset for file-tuning processes and controls, and to increase efficiency across the team.
Excellent communication and presentation skills, with the ability to engage and influence senior leadership and stakeholders.
Deep knowledge of security principles, access control models, and risk management.
Strong understanding of IT infrastructure, cloud computing, and enterprise systems.
Ability to influence and drive change across an organization while building a strong morale and culture.
Fosters collaborative decision-making processes that deliver results and exceed expectations.
Relevant certifications such as CISSP, CISM, or other security or privacy certifications are highly desirable.

Responsibilities

Directing and overseeing the strategy, engineering, operations, and execution of processes related to Zero Trust technologies within the Cybersecurity Workstation Assurance organization.
Leading a dedicated team of security engineers.
Managing the implementation and maintenance of Zero Trust solutions.
Ensuring the security and integrity of sensitive data throughout enterprise systems.
Collaborating closely with IT, security, compliance, and various business units to guarantee that secure remote access and data protection policies and procedures are closely aligned with organizational objectives and regulatory standards.
Providing engineering support for Zero Trust infrastructure across a large enterprise environment.
Working closely with the Director, developers, application owners, and the security team to design, implement, and support Zero Trust solutions that meet the needs of the organization.