Manager, Business Process Risk & Controls

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

The Manager, Business Process Risk & Controls is responsible for supporting second-line oversight of business process controls across CVS Health’s Internal Control over Financial Reporting (ICFR) environment.

Reporting to the Lead Director, Business Process Risk & Controls, this role will help execute the governance framework, oversight activities, and continuous improvement initiatives that strengthen the effectiveness, consistency, and sustainability of business process controls across CVS Health’s business segments and functional organizations.

This individual contributor role operates independently, providing recommendations and influencing decision‑making while partnering closely with business process control owners, Internal Audit, External Audit, and cross‑functional leadership teams.

As a key member of the SOX Compliance Hub, this role will help drive the organization’s vision to establish a proactive, scalable, and efficient control environment that inspires confidence across the enterprise.

• Business Process Control Governance & Oversight

• Execute enterprise governance standards and methodologies for business process controls.

• Support the development and implementation of control oversight strategies and operating procedures.

• Evaluate business process control environments and identify opportunities to improve effectiveness and consistency.

• Perform independent assessments of control design and execution across business segments and functional organizations.

• Provide recommendations to improve control sustainability and reduce operational complexity.

• Support the implementation of standardized control practices across the enterprise.

• Second‑Line Oversight & Challenge

• Provide objective challenge to management regarding business process control design, operation, and remediation activities.

• Review risk assessments, control frameworks, and control documentation to identify potential gaps or emerging risks.

• Monitor control environment performance and identify trends requiring escalation or additional oversight.

• Support issue identification, root‑cause analysis, and remediation planning activities.

• Escalate significant risks and observations to SOX Compliance Hub leadership, as appropriate.

• Support governance activities related to business process control deficiencies.

• Evaluate remediation plans and challenge management to ensure sustainable solutions are implemented.

• Monitor remediation progress and validate the effectiveness of corrective actions.

• Assist in developing reporting and dashboards that provide visibility into control performance and remediation status.

• Serve as a liaison with Internal Audit and External Audit for assigned business process areas.

• Support management’s annual SOX 404 assessment activities.

• Coordinate information requests, walkthroughs, testing activities, and remediation efforts.

• Assist with enterprise audit readiness activities and control environment assessments.

• Support initiatives focused on:

• Control optimization and rationalization

• Process standardization

• GRC technology enablement

• Data‑driven monitoring and reporting

• Continuous controls improvement

• Partner with Finance, Operations, Technology, and business…