IAM Audit & Compliance Sr Analyst - SailPoint (Hybrid, Night Shift)

Cardinal Health International Philippines Inc.; Taguig; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Cardinal Health International Philippines Inc. in Taguig is seeking a Sr Analyst, Information Security with a focus on Audit & Compliance to support IAM audit, evidence collection, and control governance.

You will collaborate with IAM teams, control owners, auditors, and stakeholders to ensure evidence is complete and compliant, maintain control narratives and repositories, and track remediation activities through closure. Proficiency in Excel and Copilot is required.

Qualifications

• Bachelors degree or equivalent in a related field or equivalent work experience.
• 3-4 years’ experience in information security, IAM, audit, compliance, or related field.
• 1-2 years’ experience supporting audit evidence, control testing, or remediation tracking.
• Strong Excel skills: formulas, vlookup, pivot tables, data validation, analysis of large datasets.
• Experience using AI tools (e.g., Copilot) to improve analysis, reporting, or evidence management.

Responsibilities

• Support IAM-related internal and external audit activities, including intake and evidence collection.
• Partner with IAM teams, control owners, auditors, and stakeholders to address audit requirements.
• Maintain audit evidence, control documentation, SOPs, narratives, and repositories.
• Review submissions for completeness, accuracy, traceability, and alignment with control requirements.
• Track findings, deficiencies, exceptions, and remediation through closure.
• Support recurring compliance activities, control testing, risk assessments, and access governance reviews.
• Create reports and metrics showing audit readiness and remediation status.
• Identify opportunities to standardize evidence collection and improve documentation quality using automation and AI tools.

Skills

Audit & Compliance

IAM

Evidence management

Data analysis

AI tools usage

Education

Bachelor's degree or equivalent

Tools

Microsoft Excel

Microsoft Copilot

Job description

Hybrid: every Thursday RTO
Shift: EST Hours (M-F)

Sr Analyst, Information Security | Audit & Compliance

Role focus: Supports IAM audit, compliance, and control governance activities by coordinating audit requests, maintaining evidence, validating control execution, tracking remediation, and helping ensure IAM processes remain documented, compliant, and audit-ready.

Job Description Summary

• Support IAM-related internal and external audit activities, including request intake, evidence collection, quality review, delivery, and follow-up.

• Partner with IAM operational teams, control owners, auditors, compliance partners, application owners, and technology stakeholders to address audit and control requirements.

• Maintain audit evidence, control documentation, standard operating procedures, control narratives, and repositories in an organized and audit-ready state.

• Review evidence submissions for completeness, accuracy, traceability, and alignment with control requirements before delivery.

• Track audit findings, control deficiencies, exceptions, management action plans, and remediation activities through closure.

• Support recurring compliance activities, control testing, risk assessments, and access governance reviews.

• Create reports and metrics that show audit readiness, evidence completion, control performance, and remediation status.

• Identify opportunities to standardize evidence collection, improve documentation quality, use automation and AI tools appropriately, and strengthen control maturity.

What Information Security Contributes to Cardinal Health

Information Security is responsible for managing information security operations. We exist to ensure availability, integrity and confidentiality of healthcare infrastructure that safeguards the patient.

• Responsible for defining, implementing, and maintaining information security policies, standards, procedures, and technologies.

• Collaborate with IT and business partners to ensure that security controls are appropriately designed and operating effectively.

• Identifies and manages information security risks to ensure compliance with enterprise security requirements.

Qualifications

• Bachelor's degree in a related field, or equivalent work experience

• 3-4 years’ experience in information security, identity and access management, audit, compliance, or related field, required

• 1 - 2 years’ experience supporting audit evidence, control testing, access reviews, remediation tracking, or other compliance activities, required

• Strong Microsoft Excel skills, including formulas, lookup functions, pivot tables, data validation, reconciliation, filtering, and analysis of large datasets

• Experience using Microsoft Copilot or other generative AI tools to improve analysis, reporting, documentation, evidence management, or operational efficiency

Functional Competencies

• Coordinate audit requests and evidence-gathering activities from intake through completion.

• Assess evidence quality and identify missing, inconsistent, or unsupported information before submission.

• Use Microsoft Excel to validate evidence, reconcile data, identify anomalies, monitor control performance, and prepare compliance reporting.

• Use Microsoft Copilot, other approved AI tools, or automation capabilities to streamline repeatable work while protecting confidential information and validating outputs for accuracy.

• Analyze operational and control data to identify trends, risks, gaps, recurring issues, and opportunities for improvement.

• Track findings, exceptions, corrective actions, and remediation commitments through timely closure.

What Is Expected at This Level

• Applies working knowledge of audit, compliance, risk, identity governance, and information security control concepts to perform varied tasks.

• Works on audit support, control validation, evidence management, reporting, and remediation activities of moderate scope and complexity.

• Identifies possible solutions to evidence, data quality, documentation, control, or remediation tracking issues and takes action to resolve them.

• Applies judgment within defined parameters and escalates risks, exceptions, or control concerns when appropriate.

• Receives general guidance and may receive more detailed instruction on new audits, control requirements, or governance improvement efforts.

• Work is reviewed for sound reasoning, accuracy, completeness, timeliness, and alignment with audit and compliance requirements.