Remote Infrastructure Governance Manager and Cloud Security

Cardinal Health; Helena (MT); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

HSA

401k plan

MyFlexPay

FSAs

Disability coverage

Work-Life resources

Parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking a senior Infrastructure Governance leader to drive the risk, security, and compliance program across multi‑cloud environments. You will mentor engineers, expand governance beyond CSPM to comprehensive security policy enforcement, and lead remediation campaigns using ServiceNow and GRC tooling.

The role emphasizes auditing, regulatory alignment (SOX, HIPAA, HITRUST, GDPR), and continuous improvement of governance metrics.

Qualifications

• 4–6 years in security compliance governance or equivalent risk management role.
• Led or directed engineering professionals or teams.
• Extensive multi-cloud experience (GCP, Azure, AWS).
• Familiarity with HIPAA, HITRUST, SOX, GDPR.

Responsibilities

• Govern firewall rule policies to align with network standards and oversee rule certification.
• Oversee CSPM and cloud-native security to ensure continuous alerting and audit reporting across GCP, Azure, and AWS.
• Orchestrate remediation campaigns using ServiceNow and GRC platforms to assign, track, and verify resolutions.
• Support SOX server quarterly certifications and address findings with urgency.
• Address non-compliance proactively (deprecated protocols, least privilege, drift from policies).
• Maintain exception management policies and timely remediation or closure.

Skills

Security governance

Cloud security

Leadership

GRC execution

Automation & AI

Education

Bachelor’s degree or equivalent

Tools

ServiceNow

GRC platforms

Cloud CSPMs

Prisma

Wiz

Sentinel

Job description

Cardinal Health is seeking a senior Infrastructure Governance leader to drive the risk, security, and compliance program across multi‑cloud environments. You will mentor engineers, expand governance beyond CSPM to comprehensive security policy enforcement, and lead remediation campaigns using ServiceNow and GRC tooling.

The role emphasizes auditing, regulatory alignment (SOX, HIPAA, HITRUST, GDPR), and continuous improvement of governance metrics.