Sr Analyst, IT Audit, SOC Controls

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Position Summary
Responsible for managing the issuance of multiple SOC1 and SOC2 reports for various CVS Health business segments, in accordance with SSAE 18 guidance and in alignment with the CVS Health SOX framework.

What you will do

• Assist with the annual reporting efforts which include: Planning, Walkthroughs, Narrative Updates, Testing, and Issuance.
• Review key controls, systems and testing approaches to, ensure alignment across the SOC and SOX Portfolio.
• Monitor project plan milestones and provide regular reporting to Internal Audit Leadership and Business Partners.
• Confirm potential deficiencies and collaborate with Internal Audit management and business partners on next steps.
• Develop an in-depth understanding of risk assessments, control design, and financial frameworks for related business segments. Communicates these concepts to Internal Audit staff.
• Work proactively with the external auditors and business partners to provide value-add consultation to strengthen the operational effectiveness and reduce the relevant risks.
• Monitor organizational changes or industry trends and recommends innovative solutions to enhance the efficiency and effectiveness of the SOC Program.
• Create program communications, trainings, updates, and reference materials for team members and relevant business partners

Required Qualifications

• 3+ years of experience in IT Audit, Cyber Security Assessment, Control Validation, Risk Assessment, or equivalent field.

Preferred Qualifications

• Certified Information Systems Auditor (CISA)
• Expert SOC 2 experience with issuing and testing.

Education

• Bachelors degree in Information Technology, Finance, Accounting, OR equivalent experience.

Anticipated Weekly Hours

Time Type

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.

• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.

• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

For more information, visit https://jobs.cvshealth.com/us/en/benefits

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.