Infrastructure Governance Lead - Remote Cloud & GRC

Cardinal Health; Richmond (VA); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Short- and long-term disability

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking an Infrastructure Governance leader to drive security governance across GCP, AWS, and Azure, ensuring continuous compliance and policy enforcement. You will oversee CSPM, firewall rule policies, and remediation campaigns, coordinating with ServiceNow and other GRC tools.

Ideal candidates have 4–6 years in security governance and cloud security, with experience leading engineering teams and strong knowledge of HIPAA, HITRUST, SOX, and GDPR.

Qualifications

• 4 to 6 years of progressive experience in security governance, cloud security engineering, or an equivalent technical risk management role.
• Leadership experience supervising or guiding engineering professionals.
• Hands-on multi-cloud knowledge (GCP, Azure, AWS) and risk management.
• Strong understanding of HIPAA, HITRUST, SOX, and GDPR.
• Experience with GRC platforms and ServiceNow.

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers, fostering growth and proactive exposure management.
• Expand governance scope beyond CSPM to include security policy enforcement, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real-time compliance results and accelerate remediation.

Skills

Leadership

Cloud security

GRC governance

CSPM

SOX compliance

HIPAA compliance

ServiceNow

GRC tools

Automation & AI

Multi-cloud (GCP/AWS/Azure)

Education

Bachelor’s degree in related field

Tools

ServiceNow

Prisma Cloud

Wiz

Microsoft Sentinel

GCP

Azure

AWS

Job description

Cardinal Health is seeking an Infrastructure Governance leader to drive security governance across GCP, AWS, and Azure, ensuring continuous compliance and policy enforcement. You will oversee CSPM, firewall rule policies, and remediation campaigns, coordinating with ServiceNow and other GRC tools.

Ideal candidates have 4–6 years in security governance and cloud security, with experience leading engineering teams and strong knowledge of HIPAA, HITRUST, SOX, and GDPR.