Remote Infrastructure Governance Manager

Cardinal Health; Denver (CO); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

HSA

401k

Wages advance

FSAs

Disability coverage

Work-Life resources

Parental leave

Wellness programs

Job summary

Cardinal Health is seeking a seasoned Infrastructure Governance leader to oversee multi-cloud security programs across GCP, Azure, and AWS. You will drive policy enforcement, vulnerability management, and compliance while maturing automation and AI-enabled remediation.

The role requires guiding a team of engineers, aligning with SOX and HIPAA/HITRUST requirements, and coordinating with GRC tools and ServiceNow for audits and reporting.

Qualifications

• 4 to 6 years in security compliance governance or equivalent
• Leadership experience mentoring or directing a team of engineers
• Hands-on multi-cloud with GCP, Azure, and AWS
• Knowledge of NIST CSF and security controls
• Understanding of HIPAA, HITRUST, SOX, GDPR
• Experience with GRC platforms, ServiceNow, and cloud-native CSPMs

Responsibilities

• Lead and mentor a team of Cloud Engineers and promote proactive exposure management
• Expand governance scope to policy enforcement, vulnerability, data, and application security management
• Champion Automation & AI to enable real-time compliance and auto-remediation of cloud risks
• Govern firewall rule policies and certify rules for all in-scope firewalls
• Oversee CSPM and cloud-native security solutions across GCP, Azure, AWS
• Coordinate remediation campaigns using ServiceNow and GRC platforms

Skills

Security governance

Cloud security

GRC

SOX

HIPAA/HITRUST

Regulatory compliance

Multi-cloud

Education

Bachelor’s degree

Tools

ServiceNow

GRC platforms

Cloud CSPMs

Prisma

Wiz

Sentinel

Job description

Cardinal Health is seeking a seasoned Infrastructure Governance leader to oversee multi-cloud security programs across GCP, Azure, and AWS. You will drive policy enforcement, vulnerability management, and compliance while maturing automation and AI-enabled remediation.

The role requires guiding a team of engineers, aligning with SOX and HIPAA/HITRUST requirements, and coordinating with GRC tools and ServiceNow for audits and reporting.