Senior Manager, Governance & SOX Controls

CVS Health; Montpelier (VT); On-site; USD 68,000 - 199,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Medical, dental, vision coverage

Job summary

CVS Health is seeking an experienced Senior Manager, Business Controls & Governance to elevate the Service Operations Compliance program. You will partner with control owners, Internal Audit, Finance, Legal, and Technology to design, document, and monitor controls across critical processes.

The role focuses on SOX and SOC 1 compliance, risk assessments, and ongoing governance improvements. The ideal leader brings deep risk management, governance experience, and a consultative mindset to

Qualifications

• 7+ years of experience in governance, compliance, risk management, internal controls, audit, or related disciplines.
• Experience working with business process owners, operational leaders, and control environments.
• Strong understanding of risk management principles and internal control frameworks.
• Direct experience supporting or leading SOX and/or SOC 1 control activities, including walkthroughs, documentation, testing support, certification processes, deficiency remediation, and audit coordination.
• Strong understanding of internal control concepts, including control design, operating effectiveness, evidence standards, segregation of duties, and remediation of control deficiencies.
• Demonstrated ability to manage complex cross-functional initiatives and influence stakeholders at multiple levels.
• Strong written and verbal communication skills, including executive-facing presentations and reporting.
• Excellent analytical, organizational, and problem-solving skills.
• Ability to translate technical compliance requirements into practical business solutions.
• Ability to operate independently, exercise sound judgment, and prioritize effectively in a complex, highly matrixed environment.
• Demonstrated ability to assess complex operating environments, identify systemic governance or control opportunities, and develop practical, sustainable solutions.

Responsibilities

• Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities.
• Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms that create greater consistency and transparency across the Service Operations control environment.
• Lead oversight of the organization's SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support.
• Facilitate risk assessments and identify emerging operational, regulatory, and compliance risks, escalating themes and concerns as appropriate.
• Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the overall control environment.
• Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders.
• Drive sustainable remediation plans for identified control deficiencies and audit findings, including clear ownership, timelines, and follow-through.
• Lead quarterly control owner certification and broader governance processes.
• Establish standards for and oversee the develop and maintain control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories.
• Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified.
• Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and increasing clarity of ownership.
• Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls.
• Assess the control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations.
• Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex regulatory and control requirements into practical business decisions.
• Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership.
• Provide guidance and training to business teams regarding internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations.
• Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions.
• Influence cross-functional partners to resolve issues, align on priorities, and make sound risk-based decisions in support of both compliance and business objectives.

Skills

Governance

SOX

SOC 1

Internal controls

Audit coordination

Risk management

Governance frameworks

Process improvement

Stakeholder management

Documentation

Education

Bachelor's degree in Business, Finance, Accounting, Healthcare Administration, Information Systems, or related discipline

Tools

GRC platforms

Control documentation tools

Job description

CVS Health is seeking an experienced Senior Manager, Business Controls & Governance to elevate the Service Operations Compliance program. You will partner with control owners, Internal Audit, Finance, Legal, and Technology to design, document, and monitor controls across critical processes.

The role focuses on SOX and SOC 1 compliance, risk assessments, and ongoing governance improvements. The ideal leader brings deep risk management, governance experience, and a consultative mindset to