Manager, Business Process Risk & Controls

CVS Health; United States; On-site; USD 66,000 - 146,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Manager of Business Process Risk & Controls to support second-line oversight of ICFR across the enterprise. You will work with business process control owners, Internal Audit and External Audit to sustain an effective control environment and drive continuous improvement.

The role blends governance, analytics and cross‑functional partnership. The position requires strong knowledge of COSO, SOX 404 and ICFR, with 5+ years in related fields and up to 10% travel.

Qualifications

• 5+ years of experience in SOX, Internal Audit, Risk Management, Controllership or public accounting.
• Knowledge of COSO Framework, SOX 404, ICFR and related controls.
• Experience working in complex, matrixed organizations.
• Strong analytical, problem‑solving and communication skills.
• Ability to travel up to 10%.

Responsibilities

• Execute governance standards and methodologies for business process controls.
• Support control oversight strategies and procedures.
• Evaluate control environments and identify improvement opportunities.
• Perform independent assessments of control design and execution.
• Provide recommendations to improve sustainability and reduce complexity.
• Coordinate with Internal/External Audit and leadership teams.
• Prepare metrics and reporting on control performance and remediation.

Skills

SOX Compliance

Internal Audit

Risk Management

Controllership

Decision-making influence

Analytical skills

Communication skills

Education

Bachelor's degree in Accounting, Finance, Business or related field

Tools

GRC technologies

Job description

Position Summary

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary: The Manager, Business Process Risk & Controls is responsible for supporting second-line oversight of business process controls across CVS Health’s Internal Control over Financial Reporting (ICFR) environment. Reporting to the Lead Director, Business Process Risk & Controls, this role will help execute the governance framework, oversight activities, and continuous improvement initiatives that strengthen the effectiveness, consistency, and sustainability of business process controls across CVS Health’s business segments and functional organizations. This individual contributor role operates independently, providing recommendations and influencing decision‑making while partnering closely with business process control owners, Internal Audit, External Audit, and cross‑functional leadership teams. As a key member of the SOX Compliance Hub, this role will help drive the organization’s vision to establish a proactive, scalable, and efficient control environment that inspires confidence across the enterprise.

Key Responsibilities

Business Process Control Governance & Oversight

• Execute enterprise governance standards and methodologies for business process controls.
• Support the development and implementation of control oversight strategies and operating procedures.
• Evaluate business process control environments and identify opportunities to improve effectiveness and consistency.
• Perform independent assessments of control design and execution across business segments and functional organizations.
• Provide recommendations to improve control sustainability and reduce operational complexity.
• Support the implementation of standardized control practices across the enterprise.

Second-Line Oversight & Challenge

• Provide objective challenge to management regarding business process control design, operation, and remediation activities.
• Review risk assessments, control frameworks, and control documentation to identify potential gaps or emerging risks.
• Monitor control environment performance and identify trends requiring escalation or additional oversight.
• Support issue identification, root‑cause analysis, and remediation planning activities.
• Escalate significant risks and observations to SOX Compliance Hub leadership, as appropriate.

Deficiency Management & Remediation

• Support governance activities related to business process control deficiencies.
• Evaluate remediation plans and challenge management to ensure sustainable solutions are implemented.
• Monitor remediation progress and validate the effectiveness of corrective actions.
• Assist in developing reporting and dashboards that provide visibility into control performance and remediation status.

Audit & Regulatory Support

• Serve as a liaison with Internal Audit and External Audit for assigned business process areas.
• Support management’s annual SOX 404 assessment activities.
• Coordinate information requests, walkthroughs, testing activities, and remediation efforts.
• Assist with enterprise audit readiness activities and control environment assessments.

Transformation & Continuous Improvement

• Support initiatives focused on: Control optimization and rationalization, Process standardization, GRC technology enablement, Data‑driven monitoring and reporting, Continuous controls improvement.
• Partner with Finance, Operations, Technology, and business leaders to modernize and simplify the control environment.
• Identify opportunities to enhance control efficiency while maintaining appropriate risk coverage.
• Governance & Reporting: Prepare materials and reporting for: Control Champion Forums, Senior Leadership Updates, Internal Audit and External Audit meetings, Deficiency governance discussions, Quarterly risk and control reporting.
• Assist in developing meaningful metrics and KPIs that provide insight into control performance and emerging risks.

Leadership Scope

This position primarily functions as an individual contributor while influencing a broad group of stakeholders across the organization.

Indirect Influence

• Business Process Control Owners
• Business Process Control Performers
• Finance Leadership Teams
• Segment Leaders
• Functional Leaders
• Internal Audit
• External Audit
• Technology and Transformation Teams

Required Qualifications

• 5+ years of experience in one or more of the following: SOX Compliance, Internal Audit, Risk Management, Controllership, Public Accounting
• Demonstrated knowledge of: COSO Framework, SOX 404, Internal Control over Financial Reporting (ICFR), Business process risks and controls
• Experience working in complex, matrixed organizations
• Strong analytical, problem‑solving, and communication skills
• Ability to work independently with limited direction and influence decision‑making through recommendations.
• Ability to travel up to 10% (including by plane)

Preferred Qualifications

• Big Four public accounting experience.
• Fortune 100 or large public company experience.
• Experience supporting SOX transformation initiatives.
• Experience with GRC technologies and control automation initiatives.
• Healthcare, insurance, PBM, retail, or consumer products industry experience.
• Experience supporting end‑to‑end process mapping and control optimization initiatives.

Education

Bachelor's degree in Accounting, Finance, Business or related field; equivalent years of work experience may substitute. High School Diploma/GED required. CPA, CIA, CISA or equivalent certification preferred.

Anticipated Weekly Hours

40

Time Type

Full time

Pay Range

The typical pay range for this role is: $66,330.00 - $145,860.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.

Benefits

Great benefits for great people. We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Additional details about available benefits are provided during the application process and on Benefits Moments.

Application Deadline

We anticipate the application window for this opening will close on: 11/17/2026

Equal Opportunity Statement

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.

Company Culture and Values

Our Work Experience is the combination of everything that's unique about us: our culture, our core values, our company meetings, our commitment to sustainability, our recognition programs, but most importantly, it's our people. Our employees are self‑disciplined, hard working, curious, trustworthy, humble, and truthful. They make choices according to what is best for the team, they live for opportunities to collaborate and make a difference, and they make us the #1 Top Workplace in the area.