Manager, IT SOC Controls - Work from Home Flexible
CVS Pharmacy - Boston, MA
Apply NowJob Description
Job DescriptionCVS Health Internal Audit Department provides high quality services to our internal business partners that consistently meet and exceed their expectations. We collaborate proactively with our business partners to focus on the most important risks/challenges facing the organization, to deliver results that make the most significant contributions, and to provide meaningful insights and solutions. We continuously look for ways to improve our audit processes and leverage technology to provide value in creative ways.Reporting to the Senior Manager of the Sarbanes-Oxley and Controls Assurance Team, the Manager will build and lead a team of approximately 6 audit/compliance professionals to manage the issuance of 25 SOC1 and SOC2 reports for the CVS Health's Pharmacy Shared Services and Health Care Benefits business segments, in accordance with SSAE 18 guidance. This role will be responsible for continually evaluating how our IT processes support the efficiency and effectiveness of the company's key control structure and recommending process improvements. The role will also collaborate on cross-functional project teams providing value in support of CVS Health achieving its transformational goals.PRIMARY DUTIES AND RESPONSIBILITIES:PROGRAM STRATEGY AND EXECUTION- Manages the annual reporting efforts including, Planning, Walkthroughs, Narrative Updates, Testing, and Issuance.- Assesses key controls based on ICFR program requirements and discusses testing approaches with Internal Audit Management, External Auditors, and business partners.- Establishes and monitors all report issuance project plan milestones and provides regular reporting to Internal Audit Management. - Assesses deficiencies for related business segments. Collaborates with business partners and external auditors on practical solutions for remediation.- Understands risk assessment objectives, control design, and financial frameworks for related business segments. Communicates these concepts to the Internal Audit team and business partners.- Works proactively with the external auditors and business partners to provide value-add consultation to strengthen operational effectiveness, and to reduce the risk of material misstatements for related business segments.- Monitors organizational changes and industry trends. Recommends innovative solutions to enhance the efficiency and effectiveness of the controls structure to Internal Audit leadership and business partners.- Oversees the creation of ICFR program communications, trainings, updates, and reference materials for team members and relevant business partners.LEADERSHIP- Recruits, develops, and retains a high performing, high quality team.- Leads the development and maintenance of audit methodologies, tools, and communication protocols for related business segments.- Manages the professional development of team members. Performs performance evaluations, and provides constructive and engaging feedback.- Develops a high performing team and provides opportunities for staff to develop the skills needed to advance to other roles within the organization. Collaborates with Internal Audit leadership to maintain an ongoing succession plan.- Identifies and implements various tools, technologies, and innovation to maximize the efficiency and effectiveness of the team.BUSINESS ADVISORY- Builds strong relationships with business partners. Provides value-add consultation to strengthen operational effectiveness, and to reduce the risk material misstatements for related business segments.- Participates in strategic planning and decision making to ensure the company is proactively anticipating and addressing risks, including promoting appropriate risk management, awareness, and mitigation for related business segments.- Actively supports a culture of transformation. Anticipates the changes required in processes and risk management practices for related business segments.- Participates in initiatives outside of Internal Audit (while considering audit's independent function/requirement) in order to become a trusted advisor for the related business segments.REQUIRED SKILLS 1. Exhibit a strong understanding of GAAP, SOX, COSO, IT audit concepts, and leading internal audit practices.2. Demonstrate working knowledge of business cycles, and understanding of associated key risks and controls.3. Relationship building and influencing skills to foster effective working relations across the teams, including functional and divisional leaders.4. Demonstrated track record of leading projects, developing audit programs, and implementing proposals.5. Willingness to take ownership and dedicate the time and/or resources needed to complete departmental and companywide initiatives.6. Demonstrate a confident and well-developed communication style that establishes credibility and facilitates clear understanding of audit issues.7. Intellectual curiosity and tenacity: strong ability to learn on the fly to understand and solve complex problems with a collaborative and optimistic attitude.8. Analytical rigor: proven capability conducting and managing quantitative analysis with the highest level of attention to detail.Pay RangeThe typical pay range for this role is:Minimum: 60,300Maximum: 130,000Please keep in mind that this range represents the pay range for all positions in the job grade within which this position falls. The actual salary offer will take into account a wide range of factors, including location.Required Qualifications4+ years of professional business experience required, including 2+ years in public accounting, internal audit, IT audit, or other relevant areas.Preferred Qualifications7 or more years of professional business experience preferred, including 4 or more years in public accounting, internal audit, and/or IT auditDegree preferably in Accounting, Finance, or Management Information Systems and relevant certificates or license indicating knowledge of internal controls / internal audit concepts.Master's degree in Accounting, Finance, or Management Information Systems (preferred).EducationBachelor's degree requiredBusiness OverviewBring your heart to CVS Health Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver. Our Heart At Work Behaviors support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable. We strive to promote and sustain a culture of diversity, inclusion and belonging every day. CVS Health is an affirmative action employer, and is an equal opportunity employer, as are the physician-owned businesses for which CVS Health provides management services. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities.
Created: 2025-11-15