Partner with business process owners to assess and support the design of internal controls aligned to significant financial reporting risks
Collaborate with IT Compliance to evaluate technology controls, system dependencies, and impacts to business process controls
Support the annual SOX scoping and risk assessment process for the Evernorth segment
Lead control impact assessments for new initiatives, process changes, and system implementations, defining required actions to maintain control integrity
Serve as a primary liaison to internal and external auditors, ensuring audit readiness, timely responses to documentation requests, and appropriate escalation of control issues
Partner with control owners to identify root cause, evaluate compensating controls, and drive remediation of control gaps or operating deficiencies
Provide subject matter expertise and guidance to team members and business partners on SOX, SOC 1, and operational controls
Support departmental initiatives, including business owner controls training, ongoing process improvements, and timely updates to control and process documentation
Build strong, trusted relationships with key stakeholders to promote alignment, accountability, and continuous improvement across the controls environment
Requirements
Bachelor’s degree required
7+ years of experience in public accounting and/or industry, with significant hands‑on experience in SOX and/or SOC 1 internal controls
CPA, CISA, or CIA strongly preferred
Strong understanding of business process and technology controls, risk assessment, and internal control frameworks
Proven ability to manage multiple priorities, meet deadlines, and navigate complex environments with minimal oversight
Strong written and verbal communication skills with the ability to clearly explain risk and control concepts to non‑technical stakeholders
Demonstrated ability to influence without authority and collaborate effectively with senior leaders, auditors, and cross‑functional teams
Proficiency in Microsoft Word, Excel, and Visio; experience with GRC tools is a plus