Manager, Business Process Risk & Controls

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Position Summary:

The Manager, Business Process Risk & Controls is responsible for supporting second-line oversight of business process controls across CVS Health’s Internal Control over Financial Reporting (ICFR) environment.

Reporting to the Lead Director, Business Process Risk & Controls, this role will help execute the governance framework, oversight activities, and continuous improvement initiatives that strengthen the effectiveness, consistency, and sustainability of business process controls across CVS Health’s business segments and functional organizations.

This individual contributor role operates independently, providing recommendations and influencing decision-making while partnering closely with business process control owners, Internal Audit, External Audit, and cross-functional leadership teams.

As a key member of the SOX Compliance Hub, this role will help drive the organization’s vision to establish a proactive, scalable, and efficient control environment that inspires confidence across the enterprise.

Key Responsibilities

• Business Process Control Governance & Oversight

• Execute enterprise governance standards and methodologies for business process controls.

• Support the development and implementation of control oversight strategies and operating procedures.

• Evaluate business process control environments and identify opportunities to improve effectiveness and consistency.

• Perform independent assessments of control design and execution across business segments and functional organizations.

• Provide recommendations to improve control sustainability and reduce operational complexity.

• Support the implementation of standardized control practices across the enterprise.

• Second-Line Oversight & Challenge

• Provide objective challenge to management regarding business process control design, operation, and remediation activities.

• Review risk assessments, control frameworks, and control documentation to identify potential gaps or emerging risks.

• Monitor control environment performance and identify trends requiring escalation or additional oversight.

• Support issue identification, root-cause analysis, and remediation planning activities.

• Escalate significant risks and observations to SOX Compliance Hub leadership, as appropriate.

Deficiency Management & Remediation

• Support governance activities related to business process control deficiencies.

• Evaluate remediation plans and challenge management to ensure sustainable solutions are implemented.

• Monitor remediation progress and validate the effectiveness of corrective actions.

• Assist in developing reporting and dashboards that provide visibility into control performance and remediation status.

Audit & Regulatory Support

• Serve as a liaison with Internal Audit and External Audit for assigned business process areas.

• Support management’s annual SOX 404 assessment activities.

• Coordinate information requests, walkthroughs, testing activities, and remediation efforts.

• Assist with enterprise audit readiness activities and control environment assessments.

Transformation & Continuous Improvement

• Support initiatives focused on:

• Control optimization and rationalization

• Process standardization

• GRC technology enablement

• Data-driven monitoring and reporting

• Continuous controls improvement

• Partner with Finance, Operations, Technology, and business leaders to modernize and simplify the control environment.

• Identify opportunities to enhance control efficiency while maintaining appropriate risk coverage.

Governance & Reporting

• Prepare materials and reporting for:

• Control Champion Forums

• Senior Leadership Updates

• Internal Audit and External Audit meetings

• Deficiency governance discussions

• Quarterly risk and control reporting

• Assist in developing meaningful metrics and KPIs that provide insight into control performance and emerging risks.

Leadership Scope

• This position primarily functions as an individual contributor while influencing a broad group of stakeholders across the organization.

• Indirect Influence

• Business Process Control Owners

• Business Process Control Performers

• Finance Leadership Teams

• Segment Leaders

• Functional Leaders

• Internal Audit

• External Audit

• Technology and Transformation Teams

• May provide informal guidance, coaching, and work direction to junior team members and cross-functional partners.

Required Qualifications:

• 5+ years of experience in one or more of the following: SOX Compliance, Internal Audit,
  Risk Management, Controllership, Public Accounting

• Demonstrated knowledge of: COSO Framework, SOX 404, Internal Control over Financial Reporting (ICFR), Business process risks and controls

…