Senior IT Controls Auditor – SOX & ITAC

NACBA; West Virginia; On-site; USD 47,000 - 112,000; Full time

Job summary

CVS Health is seeking a Senior Analyst to join the SOX IT Application Controls Audit team. You will assess IT controls, perform data integrity reviews, and support planning and testing activities across business segments.

This role partners with internal teams and external auditors to strengthen the company’s control environment. The ideal candidate has 2+ years in IT audit or risk assessment, willingness to travel up to 10%, and may hold CISA/CPA/CIA designations.

Qualifications

• 2+ years in IT Audit, Automated Controls Assessment, Risk Assessment, or Risk Consulting.
• Willingness to travel up to 10%.
• Must be able to work 8:00am-5:00pm EDT or CDT.
• Preferred: professional designations such as CISA, CPA, CIA, or progress toward them.
• Understanding of IT concepts, applications, infrastructure, change control, access management, and data privacy.

Responsibilities

• Audit execution: assess application controls and security configurations across the enterprise.
• Perform data integrity and system interface reviews.
• Review process documentation and determine audit procedures.
• Coordinate with external auditors/regulators as needed.
• Execute testing and prepare work papers with clear objectives and conclusions.
• Develop ITAC test plans for configurations, 3-way match, workflows, tolerances, and data validations.
• Test IT-generated reports for accuracy, completeness, and retention.
• Evaluate interfaces and data transfers; ensure proper reconciliation.

Skills

IT Audit

Automated Controls

Risk Assessment

Analytical skills

Communication & teamwork

Education

Bachelor's degree in IT/Finance/Accounting

Job description

CVS Health is seeking a Senior Analyst to join the SOX IT Application Controls Audit team. You will assess IT controls, perform data integrity reviews, and support planning and testing activities across business segments.

This role partners with internal teams and external auditors to strengthen the company’s control environment. The ideal candidate has 2+ years in IT audit or risk assessment, willingness to travel up to 10%, and may hold CISA/CPA/CIA designations.