SOC1 Compliance and Delivery Manager

SOC1 Compliance and Delivery Manager

Requirements

• Bachelor’s degree in a related field with 10+ years of relevant experience
• Strong understanding of controls, risk, and audit methodology over information technology
• Certifications such as CISA, CIA, CISM, or CISSP preferred
• Expertise in executing or managing regulatory compliance audits such as SOC1, SOC2 and SOX
• Excellent written and verbal communication skills
• Innovative enterprise mindset (self-starter, action oriented, results driven)

Responsibilities

• Partner with internal and external auditors to coordinate SOC1 audit timelines, engagement planning, technology controls testing, fieldwork, process walkthroughs, and reporting across multiple Evernorth reports
• Prepare, review, and deliver documentation and reports for internal and external stakeholders
• Coordinate with external auditors to ensure timely completion of SOC audits and report issuance
• Execute key functions of Internal Audit’s SOX/SOC oversight program for Evernorth
• Coordinate testing oversight, evidence gathering, deficiency analysis, and additional testing in support of external and internal audit teams
• Assist with reporting on and maintaining key measures of success for SOC Compliance efforts
• Collaborate with Financial Compliance team to assess scope and facilitate testing coverage
• Meet frequently with control owners to assess compliance with audit requests and stay appraised of changes in the environment
• Identify and communicate internal and external security/audit risks through analysis of control evidence
• Collaborate with technical teams to interpret control requirements and assess design and operating effectiveness of key controls
• Assess the effectiveness of IT general controls, including system development, security, change management, backup, batch/automated processing controls
• Review and provide feedback on scope changes to systems and infrastructure (including AWS, AI, and other technologies) and integrate them into SOX/SOC testing strategy
• Assist internal SOX testing team in execution of annual SOX/SOC test program
• Review and respond to internal and external data requests for regulatory audits
• Advise management on control implementation, remediation, and process changes, including follow-up on identified gaps
• Influence senior and line management on risks and control matters, and advise on remediation efforts
• Manage and review the work of staff performing control assessments, providing feedback and improvement opportunities
• Contribute to process improvements, including establishing continuous monitoring models and staying current on emerging technology trends

Preferred Qualifications

• Experience in auditing pharmacy benefit manager (PBM) and corporate functions preferred