Lead Director, Internal Audit - Technology Controls Assurance

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

We are seeking a senior leader to oversee technology controls assurance across the organization. This position leads teams responsible for evaluating and improving technology controls that support financial reporting, regulatory compliance, and risk management.

You will work closely with Technology, Finance, Compliance, and Internal Audit leaders to ensure controls are effective, scalable, and aligned with business needs. The role also helps drive modernization through automation, data analytics, and AI-enabled audit techniques.

• Lead, coach, and develop technology controls assurance teams.
• Manage priorities, resources, and workloads.
• Build and retain high-performing teams.
• Ensure consistency in testing methods, documentation, and quality standards.
• Foster a culture of accountability, collaboration, and continuous improvement.

• Oversee testing of:
  • IT General Controls (ITGCs)
  • IT Application Controls (ITACs)
  • Automated controls
• Support SOX technology risk assessments and annual scoping activities.
• Evaluate control deficiencies and determine business and compliance impacts.
• Partner with business and technology teams to address and remediate control issues.
• Provide guidance on emerging technology risks and control requirements.

• Serve as a primary liaison with external auditors.
• Support reliance activities related to IT controls and SOC reports.
• Coordinate with Internal Audit, Finance, Compliance, and Technology teams.
• Oversee co-sourced audit resources and third-party providers.
• Help drive efficient audit execution and reduce duplicated effort.

• Advise leaders on technology risks related to:
  • System implementations
  • Cloud migrations
  • Automation initiatives
  • Platform modernization
  • Organizational changes
• Translate technical risk and control concepts into clear business recommendations.
• Support executive reporting and Audit Committee communications.

• Improve control testing through:
  • Automation
  • Data analytics
  • Continuous monitoring
  • AI-enabled testing techniques
• Identify opportunities to make testing more efficient and effective.
• Stay current on evolving regulations, audit standards, cybersecurity risks, and emerging technologies.

• 10+ years of experience in technology audit, IT controls, SOX compliance, or a related assurance function.
• Professional certifications of CISA, CRISC, CPA, CIA or PMP required.
• At least 4 years of experience in public accounting, internal audit, or similar environments.
• Experience leading teams and managing large-scale audit or controls programs.
• Strong knowledge of:
  • SOX
  • COSO
  • IT audit principles
  • Financial and business controls
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Experience presenting to senior executives and leadership teams.
• Ability to work in the Eastern or Central time zones.
• Up to 25% travel required.

• Experience with SOC 1 and SOC 2 reporting.
• Experience using AuditBoard, Optro, or similar audit management tools.
• MBA or other advanced degree.

The typical pay range for this role is: