Senior Manager, Business Controls and Governance

CVS Health • Washington, DC

3d • $67,900 - $199,144

About The Position

CVS Health is seeking an experienced Senior Manager, Business Controls and Governance to support the Service Operations Compliance organization. The role strengthens and oversees the business control environment, leads governance activities, and partners with operational teams to manage risk across critical business processes. It will mature the organization’s governance and controls through sustainable frameworks, standards, operating routines, and accountability mechanisms that support consistency, transparency, and risk awareness across Service Operations.

The Senior Manager serves as a liaison among business operations, control owners, Internal Audit, external auditors, Finance, Legal, and Technology teams. The position oversees SOX and SOC 1 requirements and ensures controls are appropriately designed, executed, documented, and monitored. The role also advises senior leaders, supports audit and remediation activities, and translates complex risk and compliance requirements into practical, scalable business solutions. The successful candidate operates independently, exercises sound judgment, and influences stakeholders while balancing risk management, operational effectiveness, and business priorities.

Requirements

• 7+ years of experience in governance, compliance, risk management, internal controls, audit, operational excellence, or related disciplines.
• Experience working with business process owners, operational leaders, and control environments.
• Strong understanding of risk management principles and internal control frameworks.
• Direct experience supporting or leading SOX and/or SOC 1 control activities, including walkthroughs, documentation, testing support, certification processes, deficiency remediation, and audit coordination.
• Strong understanding of internal control concepts, including control design, operating effectiveness, evidence standards, segregation of duties, and remediation of control deficiencies.
• Demonstrated ability to manage complex cross-functional initiatives and influence stakeholders at multiple levels.
• Strong written and verbal communication skills, including executive-facing presentations and reporting.
• Excellent analytical, organizational, and problem-solving skills.
• Ability to translate technical compliance requirements into practical business solutions.
• Ability to operate independently, exercise sound judgment, and prioritize effectively in a complex, highly matrixed environment.
• Demonstrated ability to assess complex operating environments, identify systemic governance or control opportunities, and develop practical, sustainable solutions.

Nice To Haves

• Bachelor’s degree in Business, Finance, Accounting, Healthcare Administration, Information Systems, or a related discipline.
• CPA, CIA, CISA, or other relevant certifications.
• Experience in healthcare, insurance, financial services, or other highly regulated industries.
• Knowledge of claims operations, provider data, contracting, records retention, privacy, or operational controls.
• Experience with governance, risk, and compliance (GRC) platforms and workflow tools.
• Experience supporting remediation of audit findings and control deficiencies.
• Experience facilitating control owner governance and certification programs.
• Experience assessing the control impact of process, technology, or organizational change.
• Experience in management consulting, risk advisory, internal audit, or a similar professional services environment supporting complex governance, controls, risk, or operational transformation initiatives.
• Strong business partnership and relationship management skills.
• Ability to influence without direct authority.
• Strategic thinking and ability to balance risk management and operational effectiveness.
• Strong risk-based judgment and decision-making capability.
• Continuous improvement mindset.
• Executive presence and communication skills.
• Ability to build consensus across diverse stakeholder groups.
• Ability to challenge constructively and navigate competing priorities with credibility and professionalism.
• Results-oriented approach focused on practical and sustainable solutions.

Responsibilities

• Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities.
• Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms across the Service Operations control environment.
• Lead oversight of SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support.
• Facilitate risk assessments, identify emerging operational, regulatory, and compliance risks, and escalate themes and concerns as appropriate.
• Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the control environment.
• Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders.
• Drive sustainable remediation plans for control deficiencies and audit findings, with clear ownership, timelines, and follow-through.
• Lead quarterly control owner certification and broader governance processes.
• Establish standards for and oversee the development and maintenance of control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories.
• Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified.
• Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and clarifying ownership.
• Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls.
• Assess control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations.
• Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex requirements into practical business decisions.
• Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership.
• Provide guidance and training to business teams on internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations.
• Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions.
• Influence cross-functional partners to resolve issues, align priorities, and make sound risk-based decisions in support of compliance and business objectives.

Benefits

• CVS Health bonus, commission, or short-term incentive program eligibility.
• Award target in the company’s equity award program.
• Medical coverage.
• Dental coverage.
• Vision coverage.
• Paid time off.
• Retirement savings options.
• Wellness programs.
• Other resources to support colleagues’ and families’ physical, emotional, and financial well-being, based on eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed