Manager, Third Party Business Continuity Planning and Technology Mapping

The Manager, Third Party Business Continuity Planning and Technology Mapping position will help develop, facilitate and manage CVS Health’s efforts to map technologies obtained from third parties and drive continuity planning for these technologies. Deeply understanding the various enterprise technologies procured by large corporations and how they fit into the business environment is key to being successful in this role.

They will run the day-to-day operational activities, facilitate reporting, and facilitate adherence to and education of the process, working with business relationship owners to deeply understand the various technologies entering our environment from third parties and how they support our business processes and business units.

In addition, this role will coordinate with the Third Party Continuous Monitoring Team and other stakeholders to add internal context to risk events detected by the team and help drive continuity activities to ensure CVS Health can continue to support our customers, patients and colleagues.

Required Qualifications

• 5+ years of experience in an IT Security/IT Risk discipline.
• 5+ years of experience managing third party security risks and helping drive the third party business continuity process (impact analysis, identification of alternatives, driving testing).
• 3+ years of experience with asset management, technology management, lifecycle management, CMDB and network connectivity.
• 3+ years of hands-on experience with IT risk standards and industry best practice approaches (ISO 27000, HITRUST, CoBIT, NIST, etc.)

Preferred Qualifications

• Experience with more than one major IT discipline (distributed computing, networks, application design and development, IT security and business recovery).
• Big 4 Audit or Internal Audit Experience.
• Certified as a CISSP, CISA or CISM.
• Preference for experience in large corporate environments which are heavily regulated.
• Familiarization with ServiceNow.
• Knowledge of risk assessment methodologies, IT policies and standards.
• Strong client relationship management experience and skills.

Education

• Bachelor’s degree or equivalent experience (High School Diploma and 4 years relevant experience).