Manager, Periodic Access Review

CVS Health•Work At Home-California, CA

8d•$83,430 - $222,480

About The Position

The Manager, Periodic Access Review (PAR) Operations is responsible for overseeing the execution, quality, and continuous improvement of the organization's access review program. This role ensures that access certifications are completed accurately, on time, and in a manner that is compliant, audit-defensible, and aligned with identity governance requirements. The position drives accountability across review activities, monitors program performance, and provides leadership with clear visibility into compliance status, risks, and remediation efforts. This role also serves as a key contributor to the evolution of the access governance program by advancing automation, standardization, and process maturity. Working closely with Internal Audit, Security, IT, and business stakeholders, the Manager helps integrate and optimize IAM technologies, including SailPoint and related tools, while reducing manual effort and improving control effectiveness. Through team leadership, training, and operational excellence, this position helps ensure a scalable, sustainable access review program that supports regulatory compliance and enterprise risk management objectives.

Requirements

5+ years of experience in identity and access management, audit, or a related field
2+ years of experience with working knowledge of identity access management principles and regulatory requirements
2+ years of experience working as a project manager
Bachelor’s degree or equivalent experience (High School Diploma and 4 years relevant experience)

Nice To Haves

Experience with access management tools such as Sailpoint, is highly desirable
Professional certification such as Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM0, Certified Information Systems Auditor (CISA), and/or Certified in Risk and Information Systems Control (CRISC)
Experience in process improvement methodologies (Lean, Six Sigma)

Responsibilities

Overseeing the execution, quality, and continuous improvement of the organization's access review program.
Ensuring that access certifications are completed accurately, on time, and in a manner that is compliant, audit-defensible, and aligned with identity governance requirements.
Driving accountability across review activities.
Monitoring program performance.
Providing leadership with clear visibility into compliance status, risks, and remediation efforts.
Advancing automation, standardization, and process maturity within the access governance program.
Integrating and optimizing IAM technologies, including SailPoint and related tools.
Reducing manual effort and improving control effectiveness.
Ensuring a scalable, sustainable access review program that supports regulatory compliance and enterprise risk management objectives.