Information Systems Risk Administrator

Stay abreast of legislation and 3rd party requirements affecting CVS/pharmacy information security and risk management.Develop/review policies, procedures and standards as required.Conduct ongoing awareness presentations as required for new/changed policies or where it is determined that compliance is an issue due to awareness.Execution of daily/quarterly/monthly compliance assessments to support management/governance needs.Conduct internal compliance reviews in support of regulatory requirements (SOX/HIPAA/VISA).Conduct security and control reviews of existing systems as required.Assess security and control posture of 3rd parties and acquisition targets as required.Participate in new development efforts to ensure preventative corrective and detective measures that address availability, confidentiality and integrity are met prior to implementation of the solution.Actively participate in the architecture and implementation of security and control solutions.


REQUIREMENTS
The ideal candidate will have 10+ years experience in the Security & Control profession assessing and recommending preventative, detective and corrective measures in the following areas:


Systems Development & Maintenance

Back-Up & Disaster Recovery

Information Systems & Technology Related Security



Knowledge Retail business model, especially Pharmacy is a plus
Knowledge of GAAP, GAAS and business law are also desirable.



They must be capable of:
Articulating the risk/reward of various security and control precautions in all areas of Information Services.

Translating business risk in to practical IS&T risk management/mitigation strategies.

Working with all levels management including internal/external auditors and regulators.

Education:
B.S. In Business & Information Systems
MBA Preferred
OCTAVE (or equivalent)
COBIT
SAS-70
RUP a plus

Certifications/Regulatory Exposure:
CISA
CISM
CISSP


HIPAA/Privacy Legislation
GLB
SOX
VIPPS
PCI DSS