Lead Director, Internal Audit - Technology Controls Assurance

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. About the Role We are seeking a senior leader to oversee technology controls assurance across the organization.

This position leads teams responsible for evaluating and improving technology controls that support financial reporting, regulatory compliance, and risk management. You will work closely with Technology, Finance, Compliance, and Internal Audit leaders to ensure controls are effective, scalable, and aligned with business needs. The role also helps drive modernization through automation, data analytics, and AI-enabled audit techniques. Key Responsibilities Team Leadership Lead, coach, and develop technology controls assurance teams. Manage priorities, resources, and workloads.

Build and retain high-performing teams. Ensure consistency in testing methods, documentation, and quality standards. Foster a culture of accountability, collaboration, and continuous improvement. Technology Controls Assurance Oversee testing of: IT General Controls (ITGCs) IT Application Controls (ITACs) Automated controls Support SOX technology risk assessments and annual scoping activities. Evaluate control deficiencies and determine business and compliance impacts. Partner with business and technology teams to address and remediate control issues.

Provide guidance on emerging technology risks and control requirements. Audit & External Auditor Coordination Serve as a primary liaison with external auditors. Support reliance activities related to IT controls and SOC reports. Coordinate with Internal Audit, Finance, Compliance, and Technology teams. Oversee co-sourced audit resources and third-party providers. Help drive efficient audit execution and reduce duplicated effort.

Advisory & Strategic Partnership Advise leaders on technology risks related to: System implementations Cloud migrations Automation initiatives Platform modernization Organizational changes Translate technical risk and control concepts into clear business recommendations. Support executive reporting and Audit Committee communications. Process Improvement & Innovation Improve control testing through: Automation Data analytics Continuous monitoring AI-enabled testing techniques Identify opportunities to make testing more efficient and effective.

Stay current on evolving regulations, audit standards, cybersecurity risks, and emerging technologies. Required Qualifications 10+ years of experience in technology audit, IT controls, SOX compliance, or a related assurance function. Professional certifications of CISA, CRISC, CPA, CIA or PMP required. At least 4 years of experience in public accounting, internal audit, or similar environments. Experience leading teams and managing large-scale audit or controls programs.

Strong knowledge of: SOX COSO IT audit principles Financial and business controls Strong analytical, problem-solving, communication, and stakeholder management skills. Experience presenting to senior executives and leadership teams. Ability to work in the Eastern or Central time zones. Up to 25% travel required. Preferred Qualifications Experience with SOC 1 and SOC 2 reporting. Experience using AuditBoard, Optro, or similar audit management tools. MBA or other advanced degree.

Pay Range The typical pay range for this role is: $144,200.00 - $288,400.00 This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program.

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong. Great benefits for great people We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families.

The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Additional details about available benefits are provided during the application process and on Benefits Moments. We anticipate the application window for this opening will close on: 10/02/2026 Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.

Our Work Experience is the combination of everything that's unique about us: our culture, our core values, our company meetings, our commitment to sustainability, our recognition programs, but most importantly, it's our people. Our employees are self-disciplined, hard working, curious, trustworthy, humble, and truthful. They make choices according to what is best for the team, they live for opportunities to collaborate and make a difference, and they make us the #1 Top Workplace in the area.

• 10+ years in technology audit, IT controls, SOX compliance, with 4+ years in public accounting or internal audit
• Professional certification: CISA, CRISC, CPA, CIA, or PMP required
• Experience leading teams, managing large audit programs, strong SOX, COSO, IT audit knowledge, and executive communication skills