Cloud Security & Governance Manager

Cardinal Health; United States; On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical benefits

PTO

HSA & 401k

FSAs

Disability coverage

Work-Life resources

Parental leave

Wellness programs

Job summary

Cardinal Health is seeking a senior Infrastructure Governance professional to lead a Cloud Engineering team and drive security governance across GCP, Azure, and AWS. You will enforce risk and security policies, expand governance scope, and oversee SOC 2-like controls, CSPM implementations, and certification programs.

The role requires 4–6 years in security governance, strong leadership, and hands-on cloud security expertise, with a focus on regulatory compliance including HIPAA, HITRUST, SOX,

Qualifications

• 4 to 6 years in security compliance governance or related risk role.
• Experience leading a team of engineers.
• Hands-on multi-cloud (GCP, Azure, AWS) expertise.
• Working knowledge of security frameworks (NIST CSF).
• Solid understanding of HIPAA, HITRUST, SOX, GDPR.

Responsibilities

• Lead and mentor a high-performing Cloud Engineers team.
• Expand governance scope beyond CSPM and firewall monitoring to security policy enforcement and vulnerability management.
• Champion Automation & AI for real-time compliance and auto-remediation.
• Govern Firewall Rule Policies and certify rule compliance for all in-scope firewalls.
• Oversee CSPM & cloud-native security tools across GCP, Azure, AWS with continuous monitoring.
• Coordinate remediation campaigns using ServiceNow and GRC platforms.
• Ensure SOX quarterly certifications are completed on time and address findings.
• Audit non-compliance proactively and manage exceptions per policy.
• Produce monthly KPI/KRI reports and quarterly ROC for executives.
• Support FDA audits and HITRUST with regular reporting.
• Onboard new acquisitions to Infrastructure Governance platforms.

Skills

Security governance

Cloud security

Leadership

GRC

Regulatory compliance

Multi-cloud

Education

Bachelor’s degree

Tools

ServiceNow

GRC platforms

Prisma

Wiz

Sentinel

Job description

Cardinal Health is seeking a senior Infrastructure Governance professional to lead a Cloud Engineering team and drive security governance across GCP, Azure, and AWS. You will enforce risk and security policies, expand governance scope, and oversee SOC 2-like controls, CSPM implementations, and certification programs.

The role requires 4–6 years in security governance, strong leadership, and hands-on cloud security expertise, with a focus on regulatory compliance including HIPAA, HITRUST, SOX,