Manager - Corporate IT Audit (SOC Reporting)

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

As the Manager, Corporate IT Audit, you will lead our SOC Reporting team and oversee SOC 1 and SOC 2 audits. You'll manage audits from planning through final reporting, ensuring quality, accuracy, and compliance while helping strengthen the company's control environment.

• Manage SOC 1 and SOC 2 audits from start to finish
• Review testing results and identify control issues
• Ensure audit reports are accurate and high quality
• Serve as the subject matter expert for SOC reporting

• Evaluate IT and business risks
• Identify control gaps and recommend solutions
• Partner with stakeholders to implement improvements

• Coach, mentor, and support audit team members
• Delegate work and help build team capabilities

• Work closely with business teams, control owners, and external auditors
• Communicate audit results, risks, and recommendations clearly
• Represent the SOC Reporting team in key meetings

• Oversee multiple audits and priorities simultaneously
• Manage timelines, resources, and deliverables
• Drive continuous improvement in audit processes

• Identify opportunities for automation and efficiency
• Stay current on audit standards, IT controls, cybersecurity, and regulatory requirements

• 5+ years of experience in IT audit, risk management, compliance, or internal controls
• Ability to travel up to 10%

• Experience leading audits, projects, or teams
• Professional certification such as CISA, CPA, CISM, CRISC, or CIA (or actively pursuing certification)
• Knowledge of IT controls, cybersecurity, cloud technologies, and enterprise systems
• Familiarity with SOC audits and industry frameworks such as NIST, ISO, or COBIT
• Strong communication, analytical, and project management skills

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.