Senior Analyst, IT SOX Audit

CVS Health • Cumberland, RI

1d

About The Position

The Senior Analyst (IT SOX), Corp IT Audit is a member of CVS Health’s Technology Controls Assurance (TCA) Internal Audit team. The role participates in the annual Sarbanes-Oxley (SOX) internal audit, supports annual planning, supervises SOX testing, and collaborates with business partners, external auditors, and management. It continually evaluates and recommends improvements to IT compliance processes and the efficiency and effectiveness of the company’s key control structure. The role delivers high-quality IT SOX internal audit results under the direction of TCA Senior Managers and the Director.

The Senior Analyst performs and documents IT SOX audit activities, executes testing, prepares work papers, validates information, and communicates procedures, results, business impacts, and exceptions. The role leads individual project components and testing areas and oversees the work of more junior auditors and/or interns. It also communicates audit findings, resolves issues with Internal Audit and business management, supports department initiatives and administrative reporting, and keeps current with technology developments and evolving IT risks.

Requirements

• At least 2 years of experience in IT SOX Audit, IT SOX Compliance, Control Validation, Risk Assessment, or a Risk Consultant role.
• Certified Information Systems Auditor (CISA) certification or CISA in progress.
• Ability to travel regionally up to 10%.
• Bachelor’s degree in a relevant field such as Information Technology, Accounting, or Finance.

Nice To Haves

• Prior experience working in a large corporation and/or in a related field such as health insurance or retail.
• Familiarity with information risk frameworks including NIST 800-53, COBIT 5, ISO/IEC 27001/2, HITRUST, and PCI DSS; eGRC tools; and IIA Standards.
• Familiarity with data privacy regulations and industry standards such as HIPAA, GDPR, and CCPA.
• Familiarity with cloud environments, data classification, and data protection concepts.
• Familiarity with IT processes including applications and infrastructure, security and vulnerability assessments, change control, asset management, disaster recovery, data privacy, and IT risk assessment.
• Familiarity with automated control environments, cybersecurity best practices, and cloud security controls.
• Analytical, deductive, and critical thinking skills.
• Teamwork and collaboration skills.
• Meeting management and written communication skills.

Responsibilities

• Perform and document IT SOX audit activities in accordance with professional standards and the organization’s audit methodology.
• Execute testing and create work paper documentation.
• Understand audit procedures, results, and business impacts, and communicate that understanding in writing and verbally.
• Perform detail testing defined by the test program to define, analyze, and validate information.
• Create clear and accurate documentation and workflows of technology processes, testing results, and exceptions.
• Lead individual project components and testing areas, and oversee the work of more junior auditors and/or interns.
• Interact with Internal Audit and business line management to resolve issues promptly and maintain effective communications.
• Report audit findings to audit and business management.
• Meet administrative reporting requirements and support department initiatives.
• Contribute to team norms that promote a positive environment and improve team effectiveness.
• Keep current with relevant technology developments and evolving IT risk areas.
• Support annual SOX audit planning and supervise SOX testing.
• Continually evaluate and recommend improvements to IT compliance processes and the efficiency and effectiveness of the company’s key control structure.

Benefits

• Medical coverage
• Dental coverage
• Vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources to support colleagues’ physical, emotional, and financial well-being, based on eligibility
• Eligible for a CVS Health bonus, commission, or short-term incentive program in addition to base pay

What This Job Offers

• Job Type: Full-time
• Career Level: Senior