***There are two (2) positions associated with this posting***

***There are no Visa sponsorships available for this posting***

Position Summary
The Manager, Corporate IT Audit leads the SOC Reporting team and serves as a subject matter expert for SOC 1 and SOC 2 audits under SSAE 18. This role oversees the full audit lifecycle—from planning and control testing to evaluation and final report delivery—ensuring accuracy, quality, and alignment with internal audit standards.

This team partners closely with business owners, external auditors, and the SOX & Controls Assurance group to assess internal controls, support remediation, and strengthen CVS Health’s overall control environment.

Key Responsibilities

Leadership & Technical Expertise

• Lead and guide SOC audit engagements in line with SSAE 18.
• Review complex control testing and deficiency assessments.
• Act as the primary SME for assigned SOC reports and provide technical guidance.
• Ensure consistent, accurate, high‑quality audit deliverables.

Risk & Control Oversight

• Lead risk assessments to identify key processes and controls.
• Evaluate control issues, root causes, and remediation needs.
• Partner with business owners to drive effective, timely corrective actions.
• Provide challenge and insight to internal teams and external auditors.

People Management

• Mentor and develop audit staff.
• Provide coaching, feedback, and skill‑building opportunities.
• Delegate work effectively and promote team growth.

Stakeholder Communication

• Build strong relationships with internal partners and auditors.
• Communicate risks, findings, and remediation clearly and confidently.
• Represent SOC Reporting in meetings and organizational initiatives.

Project Management & Process Improvement

• Lead multiple SOC projects simultaneously, ensuring on‑time, high‑quality results.
• Oversee scoping, scheduling, resourcing, and documentation.
• Identify opportunities to improve audit processes, templates, and methodologies.

Innovation

• Advance SOC practices through new tools, automation, and updated standards.
• Stay current on SOC, IT controls, and regulatory developments.
• Promote consistency and knowledge sharing across the team.

Required Qualifications

• Minimum 5 years in IT Audit, Controls Assessment, Validation, Risk Assessment, or Risk Consulting.
• Reliable attendance.
• Ability to travel up to 10%.

Preferred Qualifications

• Experience planning and managing audit projects.
• Professional certifications (e.g., CISA, CRISC, CISM, CPA, CIA) or progress toward them.
• Strong knowledge of IT controls, cybersecurity, SDLC, infrastructure, and emerging technologies.
• Familiarity with SOC standards, data privacy laws (HIPAA, GDPR, CCPA), and cloud concepts.
• Understanding of frameworks such as NIST, COBIT, ISO, HITRUST, PCI.
• Strong analytical, communication, collaboration, and project management skills.
• Experience writing technical audit reports.

Education

Bachelor’s degree OR equivalent experience.