Senior Manager, Business Controls and Governance

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

We are seeking an experienced and highly motivated Senior Manager, Business Controls & Governance to support the Service Operations Compliance organization by strengthening and overseeing the business control environment, leading governance activities, and partnering with operational teams to manage risk across critical business processes. This leader will play a key role in maturing the organization’s governance and control environment by establishing sustainable frameworks, standards, operating routines, and accountability mechanisms that drive greater consistency, transparency, and risk awareness across Service Operations.

This role will serve as a key liaison between business operations, control owners, Internal Audit, external auditors, Finance, Legal, and Technology teams. The individual will lead efforts to ensure that controls are effectively designed, executed, documented, and monitored while governing and overseeing SOX and SOC 1 compliance requirements across a complex operational environment.

The ideal candidate is a collaborative leader with deep experience in risk management, operational governance, internal controls, audit support, and process improvement who can help business partners navigate compliance requirements while driving practical and sustainable solutions. This leader must be able to operate independently, exercise sound judgment in ambiguous situations, and influence decisions across a broad set of stakeholders while balancing risk management, operational effectiveness, and business priorities. The successful candidate will bring a consultative mindset and the ability to assess existing governance practices, identify systemic opportunities, and translate complex risk and compliance requirements into scalable business solutions.

Key Responsibilities

• Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities
• Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms that create greater consistency and transparency across the Service Operations control environment.
• Lead oversight of the organization's SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support
• Facilitate risk assessments and identify emerging operational, regulatory, and compliance risks, escalating themes and concerns as appropriate
• Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the overall control environment.
• Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders
• Drive sustainable remediation plans for identified control deficiencies and audit findings, including clear ownership, timelines, and follow-through
• Lead quarterly control owner certification and broader governance processes
• Establish standards for and oversee the develop and maintain control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories
• Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified
• Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and increasing clarity of ownership
• Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls
• Assess the control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations
• Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex regulatory and control requirements into practical business decisions.
• Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership
• Provide guidance and training to business teams regarding internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations
• Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions
• Influence cross-functional partners to resolve issues, align on priorities, and make sound risk-based decisions in support of both compliance and business objectives

Required Qualifications

• 7+ years of experience in governance, compliance, risk management, internal controls, audit, operational excellence, or related disciplines
• Experience working with business process owners, operational leaders, and control environments
• Strong understanding of risk management principles and internal control frameworks
• Direct experience supporting or leading SOX and/or SOC 1 control activities, including walkthroughs, documentation, testing support, certification processes, deficiency remediation, and audit coordination
• Strong understanding of internal control concepts, including control design, operating effectiveness, evidence standards, segregation of duties, and remediation of control deficiencies
• Demonstrated ability to manage complex cross-functional initiatives and influence stakeholders at multiple levels
• Strong written and verbal communication skills, including executive-facing presentations and reporting
• Excellent analytical, organizational, and problem-solving skills
• Ability to translate technical compliance requirements into practical business solutions
• Ability to operate independently, exercise sound judgment, and prioritize effectively in a complex, highly matrixed environment
• Demonstrated ability to assess complex operating environments, identify systemic governance or control opportunities, and develop practical, sustainable solutions.

Preferred Qualifications

• Bachelor’s degree in Business, Finance, Accounting, Healthcare Administration, Information Systems, or related discipline

• CPA, CIA, CISA, or other relevant certifications
• Experience in healthcare, insurance, financial services, or other highly regulated industries
• Knowledge of claims operations, provider data, contracting, records retention, privacy, or operational controls
• Experience with governance, risk, and compliance (GRC) platforms and workflow tools
• Experience supporting remediation of audit findings and control deficiencies
• Experience facilitating control owner governance and certification programs
• Experience assessing the control impact of process, technology, or organizational change
• Experience in management consulting, risk advisory, internal audit, or a similar professional services environment supporting complex governance, controls, risk, or operational transformation initiatives.

Leadership Competencies

• Strong business partnership and relationship management skills
• Ability to influence without direct authority
• Strategic thinker with the ability to balance risk management and operational effectiveness
• Strong risk-based judgment and decision-making capability
• Continuous improvement mindset
• Executive presence and communication skills
• Ability to build consensus across diverse stakeholder groups
• Ability to challenge constructively and navigate competing priorities with credibility and professionalism
• Results-oriented with a focus on practical and sustainable solutions

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.  This position also includes an award target in the company’s equity award program. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.

Additional details about available benefits are provided during the application process and on Benefits Moments.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.