Senior Manager - Enterprise Risk & Compliance

We're building a world of health around every individual – shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritise safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

The Senior Manager, Enterprise Risk & Compliance, Health Engagement & Access is accountable for designing, leading, and continuously enhancing the risk and compliance framework for health engagement, access, and equity programs on the HEAT (Health Engagement and Access) team. This role identifies, assesses, monitors, and reports on risks and compliance obligations across member‑facing outreach, engagement, and access initiatives, including associated data and reporting.

The Senior Manager sets strategy for the risk and control environment, ensures alignment with enterprise policies, regulatory expectations, and ethical standards, and provides executive‑ready insights and recommendations. This position leads cross‑functional collaboration with programme, clinical, analytics, legal, technology, and enterprise risk functions to embed strong controls while enabling innovation in how members are engaged and supported. The Senior Manager also develops and mentors colleagues, shapes operating routines, and drives continuous improvement in governance, risk management, and compliance practices for Health Engagement & Access.

• Serve as an enterprise‑wide facilitator to identify, inventory, assess, and mitigate risks related to health equity regulation, accreditation, and compliance across business units and external partners.
• Anticipate and monitor emerging regulatory, policy, and accreditation risks related to health equity and translate them into clear operational requirements and decision support for senior leaders.
• Lead the development and ongoing evolution of HEAT‑specific risk identification, assessment, and mitigation frameworks, ensuring alignment with enterprise risk management and compliance practices.
• Assess risks of action and inaction related to health equity initiatives and provide clear, strategic guidance and options to senior leaders and key stakeholders.
• Maintain an enterprise repository of HEAT‑related risk assessments, compliance documentation, correspondence, and responses to internal and external stakeholders.
• Oversee cataloguing and maintenance of materials used for RFPs, RFIs, audits, and external inquiries to ensure accuracy, consistency, and audit readiness.
• Create and maintain a centralized intake and tracking system for requests related to compliance review, revisions, and content development.
• Develop and maintain a multi‑year HEAT risk identification and mitigation roadmap, outlining current risks, mitigation strategies, dependencies, and opportunities for improvement.

• 8‑10 years of prior relevant work experience.
• Risk and compliance expertise in a complex, regulated healthcare context.
• Health equity and SDOH experience, with a clear understanding of disparities and access barriers in member engagement and outcomes.
• Executive communication and storytelling, including the ability to synthesize and present complex risk narratives to senior leaders and governance bodies.
• Operational discipline and documentation rigor, ensuring high‑quality, repeatable processes, and clear, auditable documentation.
• Leadership and stakeholder management, including team development, enterprise collaboration, and relationship‑building across multiple functions.

• Experience with enterprise risk frameworks and healthcare regulatory requirements applicable to member outreach, privacy, and equity.
• Familiarity with analytics and reporting tools used for risk, compliance, and program performance dashboards.
• Experience building and managing centralized repositories, intake workflows, or documentation systems to support audits, RFPs/RFIs, or regulatory inquiries.
• Policy monitoring and foresight.
• Strong…