AVP, Technology Assurance & Emerging Risk (Hybrid)

CVS Health; Columbus (OH); Hybrid; USD 185,000 - 376,000; Full time

Job summary

CVS Health is seeking an AVP of Technology Assurance to lead Internal Audit’s technology audit and assurance coverage, including IT cyber, emerging risk assurance, and ERP program advisory. The role requires directing multiple pillars, partnering with technology leadership, and driving risk-informed decisions across enterprise systems.

The ideal candidate will bring 15+ years in internal audit or related fields, strong executive communication, and experience leading senior teams.

Qualifications

• 15+ years of progressive experience in internal audit, risk, compliance, or related fields, including team leadership.
• Experience leading through Director-level people managers who own their respective functional areas.
• Ability to influence and partner across functions at the executive level.
• Strong project and program management skills, with the ability to manage multiple priorities and meet deadlines.
• Exceptional communication and executive presentation skills.
• Experience with audit committee and senior leadership reporting.
• Strategic mindset with the ability to develop and execute enterprise-wide initiatives.
• Team leadership skills.
• Proficiency in audit tools, data analytics, and Microsoft Office suite.
• Travel - Based on the needs of the business to Hartford, CT/Woonsocket, RI

Responsibilities

• Set strategy and audit plan coverage for IT corporate audit and cybersecurity, aligned to enterprise risk appetite.
• Oversee the Executive Director, DDAT/IT Audit in execution of the IT and cyber audit plan, including cybersecurity controls, incident response, and regulatory compliance reviews.
• Hold the primary Internal Audit relationship with technology leadership, providing independent perspective on control effectiveness, IT governance, and risk management maturity.
• Report technology audit results, themes, and emerging risks to the CAE and Audit Committee.
• Oversee the Executive Director, Emerging Risk Assurance and the third-line assurance function over AI, ML, intelligent automation, and other algorithmic or autonomous decision-making risk.
• Coordinate emerging risk coverage against established technology audit coverage owned by the DDAT/IT Audit team.
• Maintain human-in-the-loop vs human-over-the-loop distinction across audit approach and reporting, including for AI-related changes to the SOX control environment.
• Support the Emerging Risk Assurance team's advisory role with the AI Governance Council and technology teams during design of new AI use cases and governance structures.
• Serve as Internal Audit’s embedded advisory presence on governance and steering forums for large-scale ERP implementations.
• Surface control and risk considerations to program leadership ahead of go-live in an advisory capacity.
• Define the boundary between this advisory role and any downstream formal audit or SOX testing the program later requires.
• Keep the CAE informed on ERP program risk and readiness at key milestones.
• Lead, develop, and hold accountable the leaders of both functions and their teams, building a high-performance culture across established and emerging technology audit disciplines.
• Build bench strength and succession depth across the technology assurance pillar.
• Communicate audit results clearly and credibly to both technical and non-technical stakeholders, translating complex technology risk into actionable business insight.
• Build trusted working relationships with technology leadership, the AI Governance Council, ERP program leadership, and business partners while preserving audit independence.
• Model Internal Audit's leadership standards: communicate openly, act with integrity, and win together.

Skills

Leadership

Executive communication

Project management

Internal audit

Stakeholder management

Data analytics

MS Office

Education

Bachelor's degree

Tools

Microsoft Office

Audit software

Data analytics tools

Job description

CVS Health is seeking an AVP of Technology Assurance to lead Internal Audit’s technology audit and assurance coverage, including IT cyber, emerging risk assurance, and ERP program advisory. The role requires directing multiple pillars, partnering with technology leadership, and driving risk-informed decisions across enterprise systems.

The ideal candidate will bring 15+ years in internal audit or related fields, strong executive communication, and experience leading senior teams.