Manager, Corporate IT Audit

We're building a world of health around every individual—shaping a more connected, convenient and compassionate health experience. At CVS Health®, you'll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger—helping to simplify health care one person, one family and one community at a time.

About the role

As the Manager, Corporate IT Audit, you'll lead the SOC (System and Organization Controls) Reporting team and oversee SOC 1 and SOC 2 audits. You'll manage the full audit process—from planning to final report delivery—while ensuring quality, accuracy, and compliance with standards. You'll work closely with business teams, external auditors, and internal controls groups to assess risks, improve processes, and strengthen the company's control environment.

Responsibilities

• Lead SOC 1 & SOC 2 audit engagements end-to-end
• Review control testing and identify issues
• Ensure high-quality, accurate audit reports
• Serve as the subject matter expert (SME) for SOC reporting
• Identify key risks and evaluate internal controls
• Analyze control gaps and recommend improvements
• Partner with teams to implement fixes
• Coach, mentor, and support audit team members
• Delegate work and help grow team capabilities
• Collaborate with internal teams and external auditors
• Clearly explain risks, findings, and recommendations
• Represent the SOC team in meetings
• Run multiple audits at once and meet deadlines
• Plan timelines, resources, and deliverables
• Improve audit processes and tools
• Introduce new tools and automation
• Stay current on audit standards, IT controls, and regulations

Requirements

• 5+ years in IT audit, risk, or controls
• Ability to travel up to 10%
• Bachelor's degree or equivalent experience

Preferred Qualifications

• Experience managing audits or projects
• Certifications (CISA, CPA, CISM, CRISC, CIA) or working toward one
• Knowledge of IT controls, cybersecurity, cloud, and systems
• Familiarity with SOC audits and frameworks (NIST, ISO, COBIT, etc.)
• Strong communication, analytical, and project management skills

Pay

The typical pay range for this role is $54,300.00 - $145,860.00. This pay range represents the base annual full-time salary. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is also eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range.

Benefits

This full-time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families, including:

• Medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs and other resources

Additional details about available benefits are provided during the application process and on Benefits Moments.

Schedule

• Full time
• 40 anticipated weekly hours