Cloud Security & GRC Governance Lead

Cardinal Health; United States; Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health is seeking a seasoned professional to lead Infrastructure Governance, shaping security policy enforcement and risk management across GCP, Azure, and AWS. You will mentor engineers, drive automation, and oversee certification programs to sustain SOX and regulatory compliance.

The role emphasizes cross-functional collaboration with Enterprise Tech and InfoSec teams, delivering monthly KPI/KRI reports and supporting FDA HITRUST audits.

Qualifications

• 4 to 6 years of security compliance governance or equivalent technical risk role.
• Leadership experience mentoring engineering professionals.
• Extensive hands-on multi-cloud knowledge (GCP, Azure, AWS).
• Working knowledge of security frameworks, especially NIST CSF.
• Solid understanding of HIPAA, HITRUST, SOX, and GDPR.
• Experience with GRC platforms and ServiceNow.

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers, fostering growth.
• Expand governance scope beyond CSPM to enforce security policy, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real-time compliance results and accelerate remediation.

Skills

Leadership

Cloud security

GRC knowledge

Regulatory compliance

Multi-cloud

Education

Bachelor’s degree in related field

Tools

ServiceNow

Prisma

Wiz

Sentinel

CSPMs

Job description

Cardinal Health is seeking a seasoned professional to lead Infrastructure Governance, shaping security policy enforcement and risk management across GCP, Azure, and AWS. You will mentor engineers, drive automation, and oversee certification programs to sustain SOX and regulatory compliance.

The role emphasizes cross-functional collaboration with Enterprise Tech and InfoSec teams, delivering monthly KPI/KRI reports and supporting FDA HITRUST audits.