Senior Manager, Business Controls and Governance

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

We are seeking an experienced and highly motivated Senior Manager, Business Controls & Governance to support the Service Operations Compliance organization by strengthening and overseeing the business control environment, leading governance activities, and partnering with operational teams to manage risk across critical business processes. This leader will play a key role in maturing the organization’s governance and control environment by establishing sustainable frameworks, standards, operating routines, and accountability mechanisms that drive greater consistency, transparency, and risk awareness across Service Operations.

This role will serve as a key liaison between business operations, control owners, Internal Audit, external auditors, Finance, Legal, and Technology teams. The individual will lead efforts to ensure that controls are effectively designed, executed, documented, and monitored while governing and overseeing SOX and SOC 1 compliance requirements across a complex operational environment.

The ideal candidate is a collaborative leader with deep experience in risk management, operational governance, internal controls, audit support, and process improvement who can help business partners navigate compliance requirements while driving practical and sustainable solutions. This leader must be able to operate independently, exercise sound judgment in ambiguous situations, and influence decisions across a broad set of stakeholders while balancing risk management, operational effectiveness, and business priorities. The successful candidate will bring a consultative mindset and the ability to assess existing governance practices, identify systemic opportunities, and translate complex risk and compliance requirements into scalable business solutions.

Key Responsibilities

• Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities
• Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms that create greater consistency and transparency across the Service Operations control environment.
• Lead oversight of the organization's SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support
• Facilitate risk assessments and identify emerging operational, regulatory, and compliance risks, escalating themes and concerns as appropriate
• Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the overall control environment.
• Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders
• Drive sustainable remediation plans for identified control deficiencies and audit findings, including clear ownership, timelines, and follow-through
• Lead quarterly control owner certification and broader governance processes
• Establish standards for and oversee the develop and maintain control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories
• Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified
• Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and increasing clarity of ownership
• Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls
• Assess the control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations
• Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex regulatory and control requirements into practical business decisions.
• Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership
• Provide guidance and training to business teams regarding internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations
• Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions

…