Senior Manager, Business Controls and Governance

CVS Health; United States; Remote; USD 68,000 - 199,000; Full time

Job summary

CVS Health is seeking a Senior Manager, Business Controls & Governance to strengthen the control environment and lead governance across Service Operations. You will partner with control owners and leaders to ensure robust risk management and compliance with SOX and SOC 1 requirements.

The role requires influencing cross-functional teams, translating regulatory requirements into practical business actions, and driving remediation with clear ownership and timelines.

Qualifications

• 7+ years of governance, compliance, risk management, or related disciplines.
• Experience with business process owners, operational leaders, and control environments.
• Strong risk management principles and internal control frameworks.
• Direct experience supporting or leading SOX and/or SOC 1 control activities.
• Understanding of control design, operating effectiveness, and remediation of deficiencies.
• Ability to manage complex cross-functional initiatives and influence stakeholders.
• Strong written and verbal communication, including executive reporting.
• Analytical, organizational and problem-solving skills.
• Ability to translate regulatory requirements into practical business solutions.
• Ability to work independently in a complex environment.

Responsibilities

• Strengthen governance, risk management, and internal control processes across critical business activities.
• Establish governance frameworks, routines, escalation paths, and accountability mechanisms.
• Lead oversight of SOX and SOC 1 activities, including documentation, testing, certification and audit support.
• Facilitate risk assessments and identify emerging risks, escalating themes as appropriate.
• Synthesize findings to identify systemic themes and improvement opportunities.
• Coordinate control walkthroughs, testing support, and audit activities with auditors and stakeholders.
• Drive remediation plans with clear ownership and timelines.
• Lead quarterly control owner certification and governance processes.
• Develop control narratives, RCMs, RACIs, and evidence repositories.
• Advise senior leaders on control strategy and remediation approaches.
• Provide training on internal controls and audit readiness.
• Serve as trusted advisor to leaders across Service Operations and supporting functions.

Education

Bachelor’s degree

Tools

GRC platforms

Workflow tools

Job description

We're building a world of health around every individual - shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger - helping to simplify health care one person, one family and one community at a time. We are seeking an experienced and highly motivated Senior Manager, Business Controls & Governance to support the Service Operations Compliance organization by strengthening and overseeing the business control environment, leading governance activities, and partnering with operational teams to manage risk across critical business processes.

Key Responsibilities

• Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities.
• Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms that create greater consistency and transparency across the Service Operations control environment.
• Lead oversight of the organization's SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support.
• Facilitate risk assessments and identify emerging operational, regulatory, and compliance risks, escalating themes and concerns as appropriate.
• Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the overall control environment.
• Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders.
• Drive sustainable remediation plans for identified control deficiencies and audit findings, including clear ownership, timelines, and follow-through.
• Lead quarterly control owner certification and broader governance processes.
• Establish standards for and oversee the develop and maintain control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories.
• Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified.
• Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and increasing clarity of ownership.
• Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls.
• Assess the control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations.
• Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex regulatory and control requirements into practical business decisions.
• Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership.
• Provide guidance and training to business teams regarding internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations.
• Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions.
• Influence cross-functional partners to resolve issues, align on priorities, and make sound risk-based decisions in support of both compliance and business objectives.

Required Qualifications

• 7+ years of experience in governance, compliance, risk management, internal controls, audit, operational excellence, or related disciplines.
• Experience working with business process owners, operational leaders, and control environments.
• Strong understanding of risk management principles and internal control frameworks.
• Direct experience supporting or leading SOX and/or SOC 1 control activities, including walkthroughs, documentation, testing support, certification processes, deficiency remediation, and audit coordination.
• Strong understanding of internal control concepts, including control design, operating effectiveness, evidence standards, segregation of duties, and remediation of control deficiencies.
• Demonstrated ability to manage complex cross-functional initiatives and influence stakeholders at multiple levels.
• Strong written and verbal communication skills, including executive-facing presentations and reporting.
• Excellent analytical, organizational, and problem-solving skills.
• Ability to translate technical compliance requirements into practical business solutions.
• Ability to operate independently, exercise sound judgment, and prioritize effectively in a complex, highly matrixed environment.
• Demonstrated ability to assess complex operating environments, identify systemic governance or control opportunities, and develop practical, sustainable solutions.

Preferred Qualifications

• Bachelor’s degree in Business, Finance, Accounting, Healthcare Administration, Information Systems, or related discipline.
• CPA, CIA, CISA, or other relevant certifications.
• Experience in healthcare, insurance, financial services, or other highly regulated industries.
• Knowledge of claims operations, provider data, contracting, records retention, privacy, or operational controls.
• Experience with governance, risk, and compliance (GRC) platforms and workflow tools.
• Experience supporting remediation of audit findings and control deficiencies.
• Experience facilitating control owner governance and certification programs.
• Experience assessing the control impact of process, technology, or organizational change.
• Experience in management consulting, risk advisory, internal audit, or a similar professional services environment supporting complex governance, controls, risk, or operational transformation initiatives.

Leadership Competencies

• Strong business partnership and relationship management skills.
• Ability to influence without direct authority.
• Strategic thinker with the ability to balance risk management and operational effectiveness.
• Strong risk-based judgment and decision-making capability.
• Continuous improvement mindset.
• Executive presence and communication skills.
• Ability to build consensus across diverse stakeholder groups.
• Ability to challenge constructively and navigate competing priorities with credibility and professionalism.
• Results-oriented with a focus on practical and sustainable solutions.

Pay Range

The typical pay range for this role is: $67,900.00 - $199,144.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program.

Great benefits for great people. We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. This full-time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Additional details about available benefits are provided during the application process and on Benefits Moments. We anticipate the application window for this opening will close on: 10/31/2026. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws. Our Work Experience is the combination of everything that's unique about us: our culture, our core values, our company meetings, our commitment to sustainability, our recognition programs, but most importantly, it's our people. Our employees are self-disciplined, hard working, curious, trustworthy, humble, and truthful. They make choices according to what is best for the team, they live for opportunities to collaborate and make a difference, and they make us the #1 Top Workplace in the area.