Cloud Governance & Compliance Manager

Cardinal Health; Kentucky; Hybrid; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off plan

Health savings account (HSA)

Paid parental leave

Flexible spending accounts (FSAs)

Job summary

Cardinal Health is seeking a senior Infrastructure Governance leader to guide cloud security, policy enforcement, and risk management across GCP, Azure, and AWS. You will mentor engineers, drive automation, and ensure compliance with SOX, HIPAA, HITRUST, and GDPR.

The role focuses on expanding governance scope beyond CSPM, coordinating remediation via ServiceNow, and delivering KPI/KRI reports for executives. Strong leadership and regulatory knowledge are essential.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 4–6 years in security governance, cloud security engineering, or equivalent risk role.
• Proven leadership/mentoring of engineering teams.
• Hands-on cloud experience across GCP, Azure, and AWS.
• Knowledge of HIPAA, HITRUST, SOX, GDPR and related regs.

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers and drive growth.
• Expand governance scope beyond CSPM to include security policy enforcement and risk management.
• Champion Automation & AI to deliver real-time compliance and auto-remediation of cloud risks.
• Govern Firewall Rule Policies to align with network standards and direct firewall rule certification.
• Oversee CSPM & cloud-native security tools to ensure continuous alerting and audit reporting across GCP, Azure, AWS.
• Coordinate remediation campaigns using ServiceNow and GRC platforms for timely resolution.
• Manage SOX server quarterly certifications and address findings with urgency.
• Address non-compliance, deprecated protocols, least privilege, and drift from policy.
• Ensure exception management policies are followed and remediated/renewed timely.
• Produce monthly KPI and KRI reports and quarterly ROC reports for leadership.
• Support FDA audits and HITRUST certifications with evidence and governance data.
• Lead M&A security onboarding with ET/platform teams for new entities.
• Align with Cyber Operations strategies and support UVM and related programs.

Skills

Cloud security

Governance

Leadership

GRC

Multi-cloud

Regulatory compliance

Education

Bachelor’s degree in related field

Tools

Prisma Cloud

Wiz

Sentinel

Job description

Cardinal Health is seeking a senior Infrastructure Governance leader to guide cloud security, policy enforcement, and risk management across GCP, Azure, and AWS. You will mentor engineers, drive automation, and ensure compliance with SOX, HIPAA, HITRUST, and GDPR.

The role focuses on expanding governance scope beyond CSPM, coordinating remediation via ServiceNow, and delivering KPI/KRI reports for executives. Strong leadership and regulatory knowledge are essential.