Manager – Corporate IT Audit, SOC Reporting

Job Description:

• Lead SOC 1 and SOC 2 audits from start to finish
• Review testing results and identify control issues
• Ensure audit reports are accurate and high quality
• Serve as the subject matter expert for SOC reporting
• Evaluate IT and business risks
• Identify control gaps and recommend solutions
• Partner with stakeholders to implement improvements
• Coach, mentor, and support audit team members
• Delegate work and build team capabilities
• Work with business teams, control owners, and external auditors
• Communicate audit results, risks, and recommendations
• Represent the SOC Reporting team in key meetings
• Oversee multiple audits and priorities simultaneously
• Manage timelines, resources, and deliverables
• Drive continuous improvement in audit processes
• Identify opportunities for automation and efficiency
• Stay current on audit standards, IT controls, cybersecurity, and regulatory requirements

Requirements:

• 5+ years of experience in IT audit, risk management, compliance, or internal controls
• Ability to travel up to 10%
• Experience leading audits, projects, or teams
• Professional certification such as CISA, CPA, CISM, CRISC, or CIA (or actively pursuing certification)
• Knowledge of IT controls, cybersecurity, cloud technologies, and enterprise systems
• Familiarity with SOC audits and industry frameworks such as NIST, ISO, or COBIT
• Strong communication, analytical, and project management skills

Benefits:

• Medical coverage
• Dental coverage
• Vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Other resources supporting physical, emotional, and financial well-being
• CVS Health bonus, commission or short-term incentive program eligibility