Lead, Cloud & Infrastructure Governance

Cardinal Health; Hartford (CT); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

FlexPay

FSAs

Short- and long‑term disability

Work‑Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health seeks a senior Infrastructure Governance professional to drive multi-cloud security governance for GCP, Azure, and AWS from a nationwide remote location. You will lead a Cloud Engineering team, enforce policy, and advance automation for real-time compliance and rapid remediation.

The role requires 4–6 years in security governance or cloud security, strong leadership, and deep knowledge of compliance standards (HIPAA, HITRUST, SOX, GDPR) within regulated environments.

Qualifications

• 4–6 years of progressive experience in security governance or cloud security engineering.
• Demonstrated leadership or mentoring of engineering professionals.
• Extensive multi-cloud knowledge (GCP, Azure, AWS).
• Working knowledge of NIST CSF and security frameworks.
• Strong regulatory and compliance understanding (HIPAA, HITRUST, SOX, GDPR).
• Experience with GRC platforms, ServiceNow, and cloud-native security tools.

Responsibilities

• Lead and mentor a team of Cloud Engineers, fostering growth and proactive exposure management.
• Expand governance beyond CSPM to policy enforcement, vulnerability, data and application security.
• Champion automation and AI for real-time compliance and auto-remediation of cloud risks.
• Govern firewall rule policies and certify in-scope firewalls; oversee CSPM & cloud-native security tools.
• Coordinate remediation campaigns via ServiceNow and GRC platforms; track and verify resolution.
• Manage quarterly SOX certifications and address findings with urgency.
• Ensure regulatory audits (FDA, HITRUST) and compliance with HIPAA, GDPR; monitor non-compliance proactively.

Skills

Security governance

Cloud security engineering

Team leadership

Regulatory compliance

GRC platforms integration

HIPAA/HITRUST/GDPR knowledge

Education

Bachelor’s degree or equivalent experience

Tools

ServiceNow

GRC tools

Cloud CSPMs

Prisma

Wiz

Sentinel

Job description

Cardinal Health seeks a senior Infrastructure Governance professional to drive multi-cloud security governance for GCP, Azure, and AWS from a nationwide remote location. You will lead a Cloud Engineering team, enforce policy, and advance automation for real-time compliance and rapid remediation.

The role requires 4–6 years in security governance or cloud security, strong leadership, and deep knowledge of compliance standards (HIPAA, HITRUST, SOX, GDPR) within regulated environments.