SOC1 Compliance and Delivery Manager
| Company | Cigna Group |
|---|---|
| Location | Nashville, TN, USA, Philadelphia, PA, USA, Franklin, TN, USA, St. Louis, MO, USA, Hartford, CT, USA |
| Salary | $Not Provided – $Not Provided |
| Type | Full-Time |
| Degrees | Bachelor’s |
| Experience Level | Expert or higher |
Requirements
- Bachelor’s degree in a related field with 10+ years of relevant experience
- Strong understanding of controls, risk, and audit methodology over information technology
- Certifications such as CISA, CIA, CISM, or CISSP preferred
- Expertise in executing or managing regulatory compliance audits such as SOC1, SOC2 and SOX
- Excellent written and verbal communication skills
- Innovative enterprise mindset (self-starter, action oriented, results driven)
Responsibilities
- Partner with internal and external auditors to coordinate SOC1 audit timelines, engagement planning, technology controls testing, fieldwork, process walkthroughs, and reporting across multiple Evernorth reports
- Prepare, review, and deliver documentation and reports for internal and external stakeholders
- Coordinate with external auditors to ensure timely completion of SOC audits and report issuance
- Execute key functions of Internal Audit’s SOX/SOC oversight program for Evernorth
- Coordinate testing oversight, evidence gathering, deficiency analysis, and additional testing in support of external and internal audit teams
- Assist with reporting on and maintaining key measures of success for SOC Compliance efforts
- Collaborate with Financial Compliance team to assess scope and facilitate testing coverage
- Meet frequently with control owners to assess compliance with audit requests and stay appraised of changes in the environment
- Identify and communicate internal and external security/audit risks through analysis of control evidence
- Collaborate with technical teams to interpret control requirements and assess design and operating effectiveness of key controls
- Assess the effectiveness of IT general controls, including system development, security, change management, backup, batch/automated processing controls
- Review and provide feedback on scope changes to systems and infrastructure (including AWS, AI, and other technologies) and integrate them into SOX/SOC testing strategy
- Assist internal SOX testing team in execution of annual SOX/SOC test program
- Review and respond to internal and external data requests for regulatory audits
- Advise management on control implementation, remediation, and process changes, including follow-up on identified gaps
- Influence senior and line management on risks and control matters, and advise on remediation efforts
- Manage and review the work of staff performing control assessments, providing feedback and improvement opportunities
- Contribute to process improvements, including establishing continuous monitoring models and staying current on emerging technology trends
Preferred Qualifications
- Experience in auditing pharmacy benefit manager (PBM) and corporate functions preferred