Remote Infrastructure Governance Lead

Cardinal Health; Montpelier (VT); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental, vision

Paid time off

HSA

401k

MyFlexPay access

FSAs

Disability coverage

Work-Life resources

Parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking a senior leader for Infrastructure Governance to guide cloud security governance, risk, and compliance across multiple cloud platforms. The role emphasizes policy enforcement, automation, and risk remediation in a remote, nationwide capacity.

You will lead governance initiatives, manage certifications like SOX, and drive M&A security onboarding while coordinating across IT and business units. A strong background in HIPAA/HITRUST/GDPR is required.

Qualifications

• 4 to 6 years of progressive experience in security compliance governance, cloud security engineering, or an equivalent technical risk management role preferred.
• Leadership experience mentoring or directing engineering professionals.
• Extensive hands-on knowledge of multi-cloud environments (GCP, Azure, AWS).
• Working knowledge of security frameworks, especially NIST CSF.
• Solid understanding of HIPAA, HITRUST, SOX, and GDPR compliance.
• Experience using and integrating GRC platforms and cloud-native security tools.

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers, fostering growth and proactive risk exposure management.
• Expand governance scope beyond CSPM into comprehensive security policy enforcement, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real-time compliance results and accelerate cloud-risk remediation.
• Govern firewall rule policies to align with network standards and certify in-scope firewalls.
• Oversee CSPM and cloud-native security solutions for robust monitoring and audit reporting across GCP/Azure/AWS.
• Coordinate remediation campaigns using ServiceNow and GRC tools to assign and track resolutions.
• Manage SOX server quarterly certifications and address findings with urgency.
• Address non-compliance proactively and manage exception processes and renewal.

Skills

Security governance

Cloud security

Leadership

GRC knowledge

Regulatory awareness

Cross-functional collaboration

Education

Bachelor's degree in related field

Tools

ServiceNow

Prisma

Wiz

Sentinel

CSPMs

Job description

Cardinal Health is seeking a senior leader for Infrastructure Governance to guide cloud security governance, risk, and compliance across multiple cloud platforms. The role emphasizes policy enforcement, automation, and risk remediation in a remote, nationwide capacity.

You will lead governance initiatives, manage certifications like SOX, and drive M&A security onboarding while coordinating across IT and business units. A strong background in HIPAA/HITRUST/GDPR is required.