Sr Analyst, Information Security

Cardinal Health Canada Inc.; Philippines; Hybrid; PHP 500,000 - 800,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Cardinal Health is seeking a Sr Analyst, Information Security in Taguig, Philippines, to support IAM-related audit activities and collaborate with cross-functional teams to address audit and control requirements. The role emphasizes evidence management, remediation tracking, and reporting to demonstrate audit readiness.

The candidate will maintain audit documentation, review submissions for accuracy, and leverage AI tools like Copilot to improve analysis, reporting and efficiency while ensuring

Qualifications

• Bachelor's degree in a related field.

Responsibilities

• Support IAM-related internal and external audit activities, including request intake, evidence collection, quality review, delivery, and follow-up.

Tools

Microsoft Excel

Microsoft Copilot

Job description

Sr Analyst, Information Security### Sr Analyst, Information SecurityApply: Hybrid: Philippines-Bonifacio Global City-Taguig: Full time: Posted Today: 20189726**Job Description Summary*** Support IAM-related internal and external audit activities, including request intake, evidence collection, quality review, delivery, and follow-up.* Partner with IAM operational teams, control owners, auditors, compliance partners, application owners, and technology stakeholders to address audit and control requirements.* Maintain audit evidence, control documentation, standard operating procedures, control narratives, and repositories in an organized and audit-ready state.* Review evidence submissions for completeness, accuracy, traceability, and alignment with control requirements before delivery.* Track audit findings, control deficiencies, exceptions, management action plans, and remediation activities through closure.* Support recurring compliance activities, control testing, risk assessments, and access governance reviews.* Create reports and metrics that show audit readiness, evidence completion, control performance, and remediation status.* Identify opportunities to standardize evidence collection, improve documentation quality, use automation and AI tools appropriately, and strengthen control maturity.**What Information Security Contributes to Cardinal Health**Information Security is responsible for managing information security operations. We exist to ensure availability, integrity and confidentiality of healthcare infrastructure that safeguards the patient.* Responsible for defining, implementing, and maintaining information security policies, standards, procedures, and technologies.* Collaborate with IT and business partners to ensure that security controls are appropriately designed and operating effectively.* Identifies and manages information security risks to ensure compliance with enterprise security requirements.**Qualifications*** Bachelor's degree in a related field, or equivalent work experience* 3-4 years’ experience in information security, identity and access management, audit, compliance, or related field, required* 1 - 2 years’ experience supporting audit evidence, control testing, access reviews, remediation tracking, or other compliance activities, required* Strong Microsoft Excel skills, including formulas, lookup functions, pivot tables, data validation, reconciliation, filtering, and analysis of large datasets* Experience using Microsoft Copilot or other generative AI tools to improve analysis, reporting, documentation, evidence management, or operational efficiency **Functional Competencies*** Coordinate audit requests and evidence-gathering activities from intake through completion.* Assess evidence quality and identify missing, inconsistent, or unsupported information before submission.* Use Microsoft Excel to validate evidence, reconcile data, identify anomalies, monitor control performance, and prepare compliance reporting.* Use Microsoft Copilot, other approved AI tools, or automation capabilities to streamline repeatable work while protecting confidential information and validating outputs for accuracy.* Analyze operational and control data to identify trends, risks, gaps, recurring issues, and opportunities for improvement.* Track findings, exceptions, corrective actions, and remediation commitments through timely closure. **What Is Expected at This Level*** Applies working knowledge of audit, compliance, risk, identity governance, and information security control concepts to perform varied tasks.* Works on audit support, control validation, evidence management, reporting, and remediation activities of moderate scope and complexity.* Identifies possible solutions to evidence, data quality, documentation, control, or remediation tracking issues and takes action to resolve them.* Applies judgment within defined parameters and escalates risks, exceptions, or control concerns when appropriate.* Receives general guidance and may receive more detailed instruction on new audits, control requirements, or governance improvement efforts.* Work is reviewed for sound reasoning, accuracy, completeness, timeliness, and alignment with audit and compliance requirements.Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.