Head of Cloud Governance & Compliance (Remote)

Cardinal Health; Columbus (OH); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off

HSA and 401k plans

Employee assistance programs

Job summary

Cardinal Health is seeking an experienced Infrastructure Governance professional to lead security compliance across multi-cloud environments (GCP, Azure, AWS). You will oversee policy enforcement, CSPM, and remediation campaigns, ensuring SOX and regulatory alignment.

The role emphasizes leadership, governance, and collaboration with Enterprise Technology Platform and InfoSec Operations to support FDA and HITRUST reporting requirements.

Qualifications

• 4 to 6 years of progressive experience in security compliance governance or equivalent
• Experience leading, mentoring, or technically directing a team of engineering professionals
• Hands-on knowledge of multi-cloud environments (GCP, Azure, AWS)
• Understanding of HIPAA, HITRUST, SOX and GDPR requirements
• Experience using GRC platforms and cloud-native security tools

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers and foster growth
• Expand governance scope beyond CSPM and firewall monitoring to policy enforcement, vulnerability, data, and app security management
• Champion Automation & AI to deliver real-time compliance results and accelerate auto-remediation of cloud risks
• Govern Firewall Rule Policies to align with network standards and direct firewall rule certification
• Oversee CSPM & cloud-native security across GCP, Azure, AWS with ongoing alerting and audit reporting
• Coordinate remediation campaigns via ServiceNow and GRC platforms and ensure timely resolution
• Manage quarterly SOX server certifications and address findings with urgency
• Address non-compliance proactively, including deprecated protocols and least privilege violations
• Maintain exception management policy compliance with timely remediation and renewal
• Support FDA audits and HITRUST reporting as needed
• Drive M&A security onboarding and alignment with Cyber Operations and UVM

Skills

Leadership

Governance

Cloud security

Regulatory & compliance

Security policy enforcement

Education

Bachelor’s degree in related field

Tools

ServiceNow

GRC platforms

Cloud-native security tools (Prisma, Wiz, Sentinel)

Job description

Cardinal Health is seeking an experienced Infrastructure Governance professional to lead security compliance across multi-cloud environments (GCP, Azure, AWS). You will oversee policy enforcement, CSPM, and remediation campaigns, ensuring SOX and regulatory alignment.

The role emphasizes leadership, governance, and collaboration with Enterprise Technology Platform and InfoSec Operations to support FDA and HITRUST reporting requirements.