Cloud Governance & Compliance Lead

cardinalhealth; Kentucky; Hybrid; USD 107,000 - 179,000; Full time

Job summary

Cardinal Health seeks an experienced infra governance leader to oversee security governance, risk, and compliance across cloud environments. You will drive policy enforcement, remediation campaigns, and SOX/HIPAA alignment while coordinating with GRC and enterprise security teams.

The role involves overseeing CSPM, firewall rule management, and audits for FDA/HITRUST programs, with emphasis on cross-functional collaboration and timely risk mitigation.

Qualifications

• 4–6 years of progressive experience in security governance or cloud security engineering.
• Leadership experience mentoring a team of engineers.
• Strong knowledge of multi-cloud security (GCP/AWS/Azure).
• Experience with security frameworks and regulatory standards (HIPAA, HITRUST, SOX, GDPR).
• Familiarity with GRC platforms and cloud-native security tools.

Responsibilities

• Lead and mentor a high-performing Cloud Engineers team.
• Expand governance scope beyond CSPM and firewall rule monitoring to full security policy enforcement and remediation.
• Drive automation and AI to deliver real-time compliance and accelerate remediation.

Skills

Security governance

Cloud security

Leadership

Regulatory awareness

Education

Bachelor’s degree in related field

Tools

GRC platforms

ServiceNow

Prisma

Wiz

Sentinel

CSPMs

Job description

Cardinal Health seeks an experienced infra governance leader to oversee security governance, risk, and compliance across cloud environments. You will drive policy enforcement, remediation campaigns, and SOX/HIPAA alignment while coordinating with GRC and enterprise security teams.

The role involves overseeing CSPM, firewall rule management, and audits for FDA/HITRUST programs, with emphasis on cross-functional collaboration and timely risk mitigation.