Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver.

Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.

Position Summary:

• Partner with Stakeholders to define, manage, and implement a comprehensive security risk metrics program and alignment with Enterprise Risk Management metrics.
• Identify and maintain key performance, risk, and control indicators and risk metrics library that will drive actions and decisions to address areas of risk and improve operational performance.
• Implement solutions to automate and visualize risk metrics reporting through dashboards for key stakeholders using BI tools such as Tableau or PowerBI.
• Apply advanced analytical models to gain additional insights from key risk metrics for data trends and benchmarking.
• Drive adoption of key risk metrics and reporting across Information Security to inform senior leaders, key stakeholders, and risk management.
• Create and present during regularly scheduled stand ups executive level presentations and dashboards that facilitate awareness and highlight risk metric trends, gaps, and threshold exceedance.
• Partner with Information Security Leaders and stakeholders across various organizations to refine and maintain relevant risk metrics and reporting.

• 7+ years of information security, risk management, supplier governance, third party security risk, and/or information technology related experience.
• 3+ years of demonstrated experience in developing cyber security metrics. This includes metrics identification, data collection, and visualization for reporting.
• 3+ years of experience creating visualizations for executive level presentations using PowerBI or other Business Intelligence tools.
• 3+ enterprise level risk transformation expertise with demonstrable experience in influencing a risk aware culture.

• Demonstrated strong understanding of Risk Monitoring methodologies including knowledge of key differences between KRI, KPI, and KCI.
• Broad knowledge of information security technologies and frameworks, risks and controls.
• Regulatory standards including NIST, SOX, SOC, HIPAA, PCI and/or HITRUST.
• Healthcare, Insurance or Retail industry business practices and risks.
• Use of SQL, Python, Powershell for automation of data ingest or analysis.
• Effective use of reporting dashboards, reporting and presentation tools.
• CRISC Certification.

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)