Remote Cloud & Infrastructure Governance Lead

Cardinal Health; Topeka (KS); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is recruiting for an Infrastructure Governance leadership role with responsibilities spanning CSPM, firewall policy enforcement, and enterprise security governance across GCP, Azure, and AWS. The role emphasizes regulatory compliance (HIPAA, HITRUST, SOX, GDPR) and SOX certifications, with oversight of governance metrics and audits.

The ideal candidate will lead a team of cloud engineers, drive automation/AI for real-time compliance, and coordinate with cross-functional

Qualifications

• Experience: 4 to 6 years of progressive experience in security compliance governance, cloud security engineering, or an equivalent technical risk management role preferred.
• Leadership: Demonstrated experience leading, mentoring, or technically directing a team of engineering professionals.
• Cloud Expertise: Extensive, hands-on knowledge of multi-cloud environments, specifically Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).
• Framework Proficiency: Working knowledge of security frameworks, particularly NIST CSF (Cybersecurity Framework).
• Regulatory & Compliance Acumen: Solid understanding of industry regulations and compliance standards, including HIPAA, HITRUST, SOX, and GDPR.
• Systems Familiarity: Experience using and integrating GRC platforms, ServiceNow, and cloud-native security tools (e.g., Prisma, Wiz, Sentinel, or cloud-native CSPMs).

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers, fostering professional growth and establishing a culture of proactive exposure management.
• Drive team evolution by expanding the governance scope beyond CSPM and firewall rule monitoring into comprehensive security policy enforcement, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real-time compliance results, reduce manual verification cycles, and accelerate auto-remediation of cloud risks.
• Govern Firewall Rule Policies to guarantee alignment with network standards, and direct the rule certification program for all in-scope firewalls.
• Oversee CSPM & Cloud-Native Security Solutions to ensure robust, continuous alerting, monitoring, and audit reporting across GCP, Azure, and AWS.
• Orchestrate remediation campaigns for non-compliant issues, leveraging ServiceNow and GRC platforms to assign, track, and verify resolution by solution owners.
• Manage critical certifications to ensure Sarbanes‑Oxley (SOX) server quarterly certifications are executed on time, addressing any findings with urgency.
• Analyze and address non-compliance proactively, including deprecated network protocols, violations of least privilege, or any configurations drifting from internal Information Security policies.
• Ensure compliance with exception management policies and standards by maintaining accountability for approved exceptions and their timely remediation, renewal, or closure.
• Formulate governance metrics, providing monthly KPI and Key Risk Indicator (KRI) reports for internal operations, and quarterly ROC for executive leadership.
• Support regulatory audits, serving as a key stakeholder and evidence provider for FDA audits and HITRUST certifications (monthly, quarterly, and annual reporting).
• Drive M&A security onboarding, collaborating with Enterprise Technology Platform and InfoSec Operations teams to seamlessly integrate newly acquired entities onto the Infrastructure Governance platforms.
• Align with Cyber Operations strategies, ensuring direct support of foundational programs such as Unified Vulnerability Management (UVM).

Skills

Security governance

Team leadership

Cloud security

GRC frameworks

Regulatory compliance

Education

Bachelor’s degree in related field

Tools

ServiceNow

GRC platforms

Prisma

Wiz

Sentinel

CSPMs

Job description

Cardinal Health is recruiting for an Infrastructure Governance leadership role with responsibilities spanning CSPM, firewall policy enforcement, and enterprise security governance across GCP, Azure, and AWS. The role emphasizes regulatory compliance (HIPAA, HITRUST, SOX, GDPR) and SOX certifications, with oversight of governance metrics and audits.

The ideal candidate will lead a team of cloud engineers, drive automation/AI for real-time compliance, and coordinate with cross-functional