Security and Compliance Analyst

This role serves as a highly visible point of contact for security and compliance governance within CVS Caremark. You will guide security best practices across the SDLC, manage vulnerability scanning and remediation, assess enterprise risk, and support audit response activities.

• Provide expert guidance on integrating security best practices throughout the Software Development Lifecycle (SDLC)
• Track and close vulnerability remediation plans aligned with CVS Health security timelines
• Assess enterprise risks based on identified vulnerabilities and emerging threats
• Advise on security scanning and detection and recommend mitigation strategies
• Partner with internal and external auditors and support audit response activities

The position focuses on applying security governance and compliance requirements to enterprise application development and operations. Responsibilities include vulnerability management, scanning and remediation planning, infrastructure security implementation, and risk assessment aligned to security scanning and detection strategies.

The ideal candidate is a security and compliance professional who has experience governing application security and advising teams on security best practices across the Software Development Lifecycle (SDLC). They are strong in vulnerability management, remediation planning, risk assessment, and supporting audit response for cybersecurity compliance.