Executive Director, SOX & SOC Compliance

Job not on LinkedIn

🔥 14 hours ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $175.1k - $334.8k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CVS Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1963

🏥 Healthcare

⚕️ Healthcare Insurance

🛒 Retail

Healthcare • Healthcare Insurance • Retail

CVS Health is a leading American healthcare company dedicated to improving health access and affordability. The company focuses on a comprehensive approach that includes health services, health insurance, and pharmacy benefits management. Through its subsidiaries, such as Aetna and CVS Caremark, CVS Health offers a range of services that facilitate wellness, condition management, and affordable prescription drug coverage. CVS Health operates neighborhood pharmacies, provides mail-order pharmacy services, and manages specialty medication programs, aiming to make healthcare convenient and accessible for everyone. Driven by a mission to connect people with essential care services, CVS Health is committed to fostering healthier communities and supporting the wellbeing of all individuals.

📋 Description

• Own CVS Health's enterprise SOX cybersecurity/ITGC and SOC 1/SOC 2 compliance programs end-to-end from a first-line perspective • Define control scope, requirements, evidence standards, and readiness activities • Partner with the Controls Assurance Testing (CAT) team to define annual testing scope and calendar • Monitor testing progress, address blockers, and ensure control owners provide evidence and support on schedule • Lead SOC 1 and SOC 2 readiness activities, including control mapping to trust services criteria • Serve as first-line compliance point of contact for Internal Audit and external auditors • Coordinate audit requests, walkthroughs, evidence needs, and issue resolution • Own the control deficiency lifecycle, including root cause analysis, remediation planning, and closure readiness • Maintain SOX and SOC requirements, scoping documentation, and evidence standards in GRC platforms • Drive continuous improvement, evidence reuse, and reduction of duplicative requests • Produce and present executive-level reporting on compliance posture, control readiness, effectiveness, issue trends, and remediation progress • Partner with policy and standards owners on evolving regulatory and framework expectations • Support security exception and risk acceptance processes for SOX- and SOC-relevant control gaps • Lead, coach, and develop the SOX & SOC Compliance team

🎯 Requirements

• 10+ years of progressive experience leading first-line-of-defense SOX ITGC, SOC 1/SOC 2, technology compliance, or control governance programs • 3+ years in a leadership role • 7+ years managing SOX ITGC and SOC 1/SOC 2 compliance programs from a first-line-of-defense perspective • 7+ years with SOX, SOC 1/SOC 2 trust services criteria, PCAOB/AICPA standards, NIST CSF, ISO 27001, and HITRUST CSF • 3+ years with GRC and compliance management platforms such as Optro, Archer, or ServiceNow • 3+ years of people leadership, including building, developing, and retaining a high-performing compliance team • Bachelor's degree in Information Security, Accounting, Information Systems, Risk Management, or a related field, or equivalent professional experience • Relevant certifications such as CISA, CISSP, CISM, CRISC, or CPA preferred • Experience in healthcare, health insurance, pharmacy, or retail industries preferred • Experience supporting regulatory examinations, cybersecurity compliance reviews, and external audit engagements preferred • Familiarity with SEC cybersecurity disclosure requirements and materiality assessment processes preferred • Experience operating within a matrixed, multi-business-unit enterprise preferred • Ability to build and manage cross-functional partnerships preferred • Ability to communicate compliance posture, control readiness, issue status, and remediation progress to executive leadership, Internal Audit, and external auditors preferred

🏖️ Benefits

• CVS Health bonus, commission or short-term incentive program • Equity award program • Medical coverage • Dental coverage • Vision coverage • Paid time off • Retirement savings options • Wellness programs • Other resources supporting physical, emotional, and financial well-being