Sr. Analyst (Cybersecurity) Corporate IT Audit

$43,700 - $107,200/Yr

CVS Health - Northbrook, IL

Full-time - Mid Level

Remote - Northbrook, IL

Health and Personal Care Retailers

About the position

The Sr. Analyst (Cybersecurity) Corporate IT Audit at CVS Health is a pivotal role within the Data, Digital, Analytics and Technology (DDAT) Internal Audit team. This position focuses on executing internal audits related to cybersecurity and IT, ensuring high-quality audit results. The analyst will be responsible for planning and performing IT risk assessments, developing test plans, and documenting internal controls while effectively communicating audit findings to management. The role operates in a hybrid work environment, requiring in-office presence three days a week.

Responsibilities

• Perform and document Cyber Security & Technology audit activities according to professional standards.
• Execute testing and create work paper documentation.
• Understand procedures, results, and business impacts; document and express understanding in written and verbal form.
• Perform detailed testing as defined by the test program to analyze and validate information.
• Create clear documentation and workflows of cybersecurity & technology processes and testing results.
• Lead individual cybersecurity project components and oversee the work of junior auditors and interns.
• Interact with various levels of Internal Audit and DDAT line management to resolve issues and maintain effective communications.
• Report audit findings to audit and DDAT management.
• Support department initiatives and meet administrative reporting requirements.
• Contribute to a positive team environment and improve team effectiveness.
• Stay current on relevant cybersecurity & technology developments.

Requirements

• 3+ years experience in IT Audit, Cyber Security assessments, Controls Assessment, Control Validation, Risk Assessment, or Risk Consultant.
• CISSP Professional Designation.
• Ability to travel up to 10%.
• Demonstrated knowledge of risk assessment and familiarity with tools and techniques for control and monitoring mechanisms.
• Knowledge of IT audit methodologies and control frameworks, including network security and change management controls.
• Proficiency in information security tools to exploit vulnerabilities in networks and applications.
• Strong analytical, deductive, problem-solving, and critical thinking skills.
• Good teamwork and collaboration skills.
• Solid meeting management and written communication skills.

Nice-to-haves

• Experience in relevant IT Audit, Risk Assessment, or Risk Consultant role.
• Practical knowledge of IT processes, risks, and internal controls.
• Prior experience in a large corporation or related fields such as Health Insurance or Retail.

Benefits

• Full range of medical, dental, and vision benefits.
• 401(k) retirement savings plan.
• Employee Stock Purchase Plan.
• Fully-paid term life insurance plan.
• Short-term and long-term disability benefits.
• Well-being programs and education assistance.
• Free development courses.
• CVS store discount and discount programs with partners.
• Paid Time Off (PTO) and paid holidays.