Senior Manager, Business Controls and Governance

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. We are seeking an experienced and highly motivated Senior Manager, Business Controls & Governance to support the Service Operations Compliance organization by strengthening and overseeing the business control environment, leading governance activities, and partnering with operational teams to manage risk across critical business processes. This leader will play a key role in maturing the organization’s governance and control environment by establishing sustainable frameworks, standards, operating routines, and accountability mechanisms that drive greater consistency, transparency, and risk awareness across Service Operations. This role will serve as a key liaison between business operations, control owners, Internal Audit, external auditors, Finance, Legal, and Technology teams. The individual will lead efforts to ensure that controls are effectively designed, executed, documented, and monitored while governing and overseeing SOX and SOC 1 compliance requirements across a complex operational environment. The ideal candidate is a collaborative leader with deep experience in risk management, operational governance, internal controls, audit support, and process improvement who can help business partners navigate compliance requirements while driving practical and sustainable solutions. This leader must be able to operate independently, exercise sound judgment in ambiguous situations, and influence decisions across a broad set of stakeholders while balancing risk management, operational effectiveness, and business priorities. The successful candidate will bring a consultative mindset and the ability to assess existing governance practices, identify systemic opportunities, and translate complex risk and compliance requirements into scalable business solutions. Partner with business leaders and control owners to strengthen governance, risk management, and internal control processes across critical business activities Establish and mature governance frameworks, operating routines, decision rights, escalation paths, and accountability mechanisms that create greater consistency and transparency across the Service Operations control environment. Lead oversight of the organization's SOX and SOC 1 compliance activities, including control governance, monitoring, documentation, certification, and audit support Facilitate risk assessments and identify emerging operational, regulatory, and compliance risks, escalating themes and concerns as appropriate Synthesize control findings, audit observations, and operational risk indicators to identify systemic themes, emerging risks, and opportunities to strengthen the overall control environment. Coordinate and oversee control walkthroughs, testing support, and audit activities with Internal Audit, external auditors, and business stakeholders Lead quarterly control owner certification and broader governance processes Establish standards for and oversee the develop and maintain control documentation, including narratives, risk and control matrices (RCMs), RACI documentation, and supporting evidence repositories Evaluate control design and operating effectiveness and help business teams strengthen controls where gaps, inefficiencies, or inconsistencies are identified Partner with operational teams to improve control effectiveness while reducing unnecessary administrative burden and increasing clarity of ownership Evaluate business processes and recommend opportunities for process standardization, automation, and enhanced controls Assess the control implications of business process, system, and organizational changes, and advise partners on risk and governance considerations Advise senior leaders on control strategy, governance priorities, risk tradeoffs, and remediation approaches, translating complex regulatory and control requirements into practical business decisions. Develop executive-level communications, status reports, dashboards, scorecards, and presentations for senior leadership Provide guidance and training to business teams regarding internal controls, audit readiness, evidence retention, certification expectations, and compliance expectations Serve as a trusted advisor and business partner to leaders across Service Operations and supporting functions Influence cross-functional partners to resolve issues, align on priorities, and make sound risk-based decisions in support of both compliance and business objectives 7+ years of experience in governance, compliance, risk management, internal controls, audit, operational excellence, or related disciplines

• Experience working with business process owners, operational leaders, and control environments
• Strong understanding of risk management principles and internal control frameworks
• Direct experience supporting or leading SOX and/or SOC 1 control activities, including walkthroughs, documentation, testing support, certification processes, deficiency remediation, and audit coordination
• Demonstrated ability to manage complex cross-functional initiatives and influence stakeholders at multiple levels
• Ability to translate technical compliance requirements into practical business solutions
• Demonstrated ability to assess complex operating environments, identify systemic governance or control opportunities, and develop practical, sustainable solutions.

Bachelor’s degree in Business, Finance, Accounting, Healthcare Administration, Information Systems, or related discipline Experience in healthcare, insurance, financial services, or other highly regulated industries Knowledge of claims operations, provider data, contracting, records retention, privacy, or operational controls Experience with governance, risk, and compliance (GRC) platforms and workflow tools Experience supporting remediation of audit findings and control deficiencies Experience facilitating control owner governance and certification programs Experience in management consulting, risk advisory, internal audit, or a similar professional services environment supporting complex governance, controls, risk, or operational transformation initiatives. Strong business partnership and relationship management skills Strategic thinker with the ability to balance risk management and operational effectiveness Strong risk-based judgment and decision-making capability Continuous improvement mindset This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong. This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Additional details about available benefits are provided during the application process and on Benefits Moments . We anticipate the application window for this opening will close on: 10/31/2026 Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.