Remote Cloud Governance & Risk Manager

Cardinal Health; Olympia (WA); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical/Dental/Vision

PTO

HSA

401k

Early wage access

FSAs

Disability insurance

Work-Life resources

Paid parental leave

Wellbeing programs

Job summary

Cardinal Health is seeking a senior Infrastructure Governance leader to manage cloud security governance, policy enforcement, and risk remediation across GCP, Azure, and AWS. This role requires guiding a team of engineers and driving automation to improve compliance cycles.

You will coordinate CSPM, firewall governance, and regulatory reporting, contributing to SOX, HIPAA, HITRUST, and GDPR compliance in a nationwide remote setting.

Qualifications

• 4 to 6 years of progressive security governance or cloud security experience.
• Leadership experience mentoring engineering professionals.
• Extensive multi‑cloud knowledge: GCP, Azure, AWS.
• Working knowledge of security frameworks (NIST CSF) and regulatory standards (HIPAA, HITRUST, SOX, GDPR).
• Experience with GRC platforms, ServiceNow, and cloud‑native security tools.

Responsibilities

• Lead and mentor a high‑performing team of Cloud Engineers.
• Expand governance scope to policy enforcement, vulnerability, data, and application security.
• Champion Automation & AI for real‑time compliance and auto‑remediation of cloud risks.
• Govern firewall rule policies and CSPM across cloud environments.
• Oversee remediation campaigns and audit reporting for SOX, HIPAA, and other standards.

Skills

Security governance

Cloud security

Team leadership

Regulatory awareness

GRC platforms

Education

Bachelor’s degree or equivalent

Tools

ServiceNow

GRC platforms

Cloud-native CSPMs

Prisma

Wiz

Sentinel

Job description

Cardinal Health is seeking a senior Infrastructure Governance leader to manage cloud security governance, policy enforcement, and risk remediation across GCP, Azure, and AWS. This role requires guiding a team of engineers and driving automation to improve compliance cycles.

You will coordinate CSPM, firewall governance, and regulatory reporting, contributing to SOX, HIPAA, HITRUST, and GDPR compliance in a nationwide remote setting.