Lead Director, Internal Audit - Technology Controls Assurance

CVS Health•Island, KY

7d•$144,200 - $288,400•Remote

About The Position

We are seeking a senior leader to oversee technology controls assurance across the organization. This position leads teams responsible for evaluating and improving technology controls that support financial reporting, regulatory compliance, and risk management. You will work closely with Technology, Finance, Compliance, and Internal Audit leaders to ensure controls are effective, scalable, and aligned with business needs. The role also helps drive modernization through automation, data analytics, and AI-enabled audit techniques.

Requirements

10+ years of experience in technology audit, IT controls, SOX compliance, or a related assurance function.
Professional certifications of CISA, CRISC, CPA, CIA or PMP required.
At least 4 years of experience in public accounting, internal audit, or similar environments.
Experience leading teams and managing large-scale audit or controls programs.
Strong knowledge of SOX, COSO, IT audit principles, Financial and business controls.
Strong analytical, problem-solving, communication, and stakeholder management skills.
Experience presenting to senior executives and leadership teams.
Ability to work in the Eastern or Central time zones.

Nice To Haves

Experience with SOC 1 and SOC 2 reporting.
Experience using AuditBoard, Optro, or similar audit management tools.
MBA or other advanced degree.

Responsibilities

Lead, coach, and develop technology controls assurance teams.
Manage priorities, resources, and workloads.
Build and retain high-performing teams.
Ensure consistency in testing methods, documentation, and quality standards.
Foster a culture of accountability, collaboration, and continuous improvement.
Oversee testing of: IT General Controls (ITGCs), IT Application Controls (ITACs), Automated controls.
Support SOX technology risk assessments and annual scoping activities.
Evaluate control deficiencies and determine business and compliance impacts.
Partner with business and technology teams to address and remediate control issues.
Provide guidance on emerging technology risks and control requirements.
Serve as a primary liaison with external auditors.
Support reliance activities related to IT controls and SOC reports.
Coordinate with Internal Audit, Finance, Compliance, and Technology teams.
Oversee co-sourced audit resources and third-party providers.
Help drive efficient audit execution and reduce duplicated effort.
Advise leaders on technology risks related to system implementations, cloud migrations, automation initiatives, platform modernization, and organizational changes.
Translate technical risk and control concepts into clear business recommendations.
Support executive reporting and Audit Committee communications.
Improve control testing through automation, data analytics, continuous monitoring, and AI-enabled testing techniques.
Identify opportunities to make testing more efficient and effective.
Stay current on evolving regulations, audit standards, cybersecurity risks, and emerging technologies.