Cloud Governance Leader - GRC & Compliance

Cardinal Health; Madison (WI); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

HSA

Work-Life resources

Paid parental leave

Job summary

Cardinal Health is seeking an Infrastructure Governance leader to oversee security governance, risk, and compliance across cloud environments. You will mentor engineers, expand policy enforcement, and drive automation to deliver real-time compliance and auto-remediation.

The role requires strong experience in CSPMs, ServiceNow, and SOX-related certifications, with a focus on HIPAA, HITRUST, and GDPR regulatory alignment. This position is remote in the US with national scope.

Qualifications

• 4 to 6 years in security compliance governance or cloud security engineering.
• ,
• Experience leading engineering professionals and advancing governance programs.
• Deep knowledge of multi‑cloud (GCP, Azure, AWS) and security frameworks like NIST CSF.
• Familiarity with HIPAA, HITRUST, SOX, GDPR and regulatory controls.

Responsibilities

• Lead and mentor a team of Cloud Engineers.
• Drive governance scope beyond CSPM to policy enforcement, vulnerabilities, data and app security.
• Champion Automation & AI to deliver real-time compliance results and auto-remediation.
• Govern Firewall Rule Policies and CSPM monitoring across cloud platforms.
• Oversee cloud-native security tools and reporting (GCP/Azure/AWS).
• Coordinate remediation via ServiceNow and GRC platforms with owners.
• Ensure timely SOX server certifications and address findings.

Skills

Security governance

Cloud security engineering

Leadership

Policy enforcement

Automation

Education

Bachelor’s degree or equivalent

Tools

GRC platforms

ServiceNow

Prisma

Wiz

CSPMs

Job description

Cardinal Health is seeking an Infrastructure Governance leader to oversee security governance, risk, and compliance across cloud environments. You will mentor engineers, expand policy enforcement, and drive automation to deliver real-time compliance and auto-remediation.

The role requires strong experience in CSPMs, ServiceNow, and SOX-related certifications, with a focus on HIPAA, HITRUST, and GDPR regulatory alignment. This position is remote in the US with national scope.