Manager, Business Process Risk & Controls

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

Position Summary:

The Manager, Business Process Risk & Controls is responsible for supporting second-line oversight of business process controls across CVS Health’s Internal Control over Financial Reporting (ICFR) environment.

Reporting to the Lead Director, Business Process Risk & Controls, this role will help execute the governance framework, oversight activities, and continuous improvement initiatives that strengthen the effectiveness, consistency, and sustainability of business process controls across CVS Health’s business segments and functional organizations.

This individual contributor role operates independently, providing recommendations and influencing decision-making while partnering closely with business process control owners, Internal Audit, External Audit, and cross-functional leadership teams.

As a key member of the SOX Compliance Hub, this role will help drive the organization’s vision to establish a proactive, scalable, and efficient control environment that inspires confidence across the enterprise.

Key Responsibilities

• Business Process Control Governance & Oversight

• Execute enterprise governance standards and methodologies for business process controls.

• Support the development and implementation of control oversight strategies and operating procedures.

• Evaluate business process control environments and identify opportunities to improve effectiveness and consistency.

• Perform independent assessments of control design and execution across business segments and functional organizations.

• Provide recommendations to improve control sustainability and reduce operational complexity.

• Support the implementation of standardized control practices across the enterprise.

• Second-Line Oversight & Challenge

• Provide objective challenge to management regarding business process control design, operation, and remediation activities.

• Review risk assessments, control frameworks, and control documentation to identify potential gaps or emerging risks.

• Monitor control environment performance and identify trends requiring escalation or additional oversight.

• Support issue identification, root-cause analysis, and remediation planning activities.

• Escalate significant risks and observations to SOX Compliance Hub leadership, as appropriate.

Deficiency Management & Remediation

• Support governance activities related to business process control deficiencies.

• Evaluate remediation plans and challenge management to ensure sustainable solutions are implemented.

• Monitor remediation progress and validate the effectiveness of corrective actions.

• Assist in developing reporting and dashboards that provide visibility into control performance and remediation status.

Audit & Regulatory Support

• Serve as a liaison with Internal Audit and External Audit for assigned business process areas.

• Support management’s annual SOX 404 assessment activities.

• Coordinate information requests, walkthroughs, testing activities, and remediation efforts.

• Assist with enterprise audit readiness activities and control environment assessments.

Transformation & Continuous Improvement

• Support initiatives focused on:

• Control optimization and rationalization

• Process standardization

• GRC technology enablement

• Data-driven monitoring and reporting

• Continuous controls improvement

• Partner with Finance, Operations, Technology, and business leaders to modernize and simplify the control environment.

• Identify opportunities to enhance control efficiency while maintaining appropriate risk coverage.

Governance & Reporting

• Prepare materials and reporting for:

• Control Champion Forums

• Senior Leadership Updates

• Internal Audit and External Audit meetings

• Deficiency governance discussions

• Quarterly risk and control reporting

• Assist in developing meaningful metrics and KPIs that provide insight into control performance and emerging risks.

Leadership Scope

• This position primarily functions as an individual contributor while influencing a broad group of stakeholders across the organization.

• Indirect Influence

• Business Process Control Owners

• Business Process Control Performers

• Finance Leadership Teams

• Segment Leaders

• Functional Leaders

• Internal Audit

• External Audit

• Technology and Transformation Teams

• May provide informal guidance, coaching, and work direction to junior team members and cross-functional partners.

Required Qualifications:

• 5+ years of experience in one or more of the following: SOX Compliance, Internal Audit,
  Risk Management, Controllership, Public Accounting

• Demonstrated knowledge of: COSO Framework, SOX 404, Internal Control over Financial Reporting (ICFR), Business process risks and controls

• Experience working in complex, matrixed organizations

• Strong analytical, problem-solving, and communication skills

• Ability to work independently with limited direction and influence decision-making through recommendations.
• Ability to travel up to 10% (including by plane)

Preferred Qualifications:

• Big Four public accounting experience.
• Fortune 100 or large public company experience.
• Experience supporting SOX transformation initiatives.
• Experience with GRC technologies and control automation initiatives.
• Healthcare, insurance, PBM, retail, or consumer products industry experience.
• Experience supporting end-to-end process mapping and control optimization initiatives.

Education:

• Bachelor's degree in Accounting, Finance, Business or related field; equivalent years of work experience may substitute.
• High School Diploma/GED required.
• CPA, CIA, CISA or equivalent certification preferred.

Anticipated Weekly Hours

Time Type

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.

Additional details about available benefits are provided during the application process and on Benefits Moments.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.

About us