Assistant Vice President, Technology Assurance
About the role
At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. The AVP, Technology Assurance leads Internal Audit’s technology audit and assurance coverage across CVS Health. The role brings together three areas of coverage under a single leader: established technology and cybersecurity audit, emerging risk assurance, and Internal Audit’s advisory presence on the company’s largest enterprise system implementations. The AVP provides independent, third-line assurance and advisory support across the technology landscape.
Responsibilities
Technology and Cybersecurity Audit Leadership
- Set strategy and audit plan coverage for IT corporate audit and cybersecurity, aligned to enterprise risk appetite.
- Oversee the Executive Director, DDAT/IT Audit in execution of the IT and cyber audit plan, including cybersecurity controls, incident response, and regulatory compliance reviews.
- Hold the primary Internal Audit relationship with technology leadership, providing independent perspective on control effectiveness, IT governance, and risk management maturity.
- Report technology audit results, themes, and emerging risks to the CAE and Audit Committee.
Emerging Risk Assurance Oversight
- Oversee the Executive Director, Emerging Risk Assurance and the third-line assurance function over AI, machine learning, intelligent automation, and other algorithmic or autonomous decision-making risk.
- Ensure emerging risk assurance work stays positioned as independent evaluation of governance and controls, distinct from strategy-setting or management of how AI and emerging solutions are built and deployed.
- Coordinate emerging risk coverage against established technology audit coverage owned by the DDAT/IT Audit team, so the two pillars stay aligned without duplicating work.
- Maintain the human-in-the-loop versus human-over-the-loop distinction across audit approach and reporting, including for AI-related changes to the SOX control environment.
- Support the Emerging Risk Assurance team's advisory role with the AI Governance Council and technology teams during design of new AI use cases and governance structures.
ERP Program Advisory
- Serve as Internal Audit's embedded advisory presence on governance and steering forums for large-scale ERP implementations.
- Surface control and risk considerations to program leadership ahead of go-live in an advisory capacity.
- Define the boundary between this advisory role and any downstream formal audit or SOX testing the program later requires.
- Keep the CAE informed on ERP program risk and readiness at key milestones.
Leadership, People Management, and Communication
- Lead, develop, and hold accountable the leaders of both functions and their teams, building a high-performance culture across established and emerging technology audit disciplines.
- Build bench strength and succession depth across the technology assurance pillar.
- Communicate audit results clearly and credibly to both technical and non-technical stakeholders, translating complex technology risk into actionable business insight.
- Build trusted working relationships with technology leadership, the AI Governance Council, ERP program leadership, and business partners while preserving audit independence.
- Model Internal Audit's leadership standards: communicate openly, act with integrity, and win together.
Required Qualifications
- 15+ years of progressive experience in internal audit, risk, compliance, or related fields, including team leadership.
- Experience leading through Director-level people managers who own their respective functional areas, operating in complex, ambiguous, multi-functional environments.
- Ability to influence and partner across functions at the executive level.
- Strong project and program management skills, with the ability to manage multiple priorities and meet deadlines.
- Exceptional communication and executive presentation skills.
- Experience with audit committee and senior leadership reporting.
- Strategic mindset with the ability to develop and execute enterprise-wide initiatives.
- Team leadership skills.
- Proficiency in audit tools, data analytics, and Microsoft Office suite.
- Travel — Based on the needs of the business to Hartford, CT/Woonsocket, RI.
- Bachelor's degree (required).
Pay
The Typical Pay Range For This Role Is $185,400.00 - $375,950.00. This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program.