Remote Lead, Cloud & Infrastructure Governance

Cardinal Health; Phoenix (AZ); Remote; USD 125,000 - 179,000; Full time

Job summary

Cardinal Health is seeking an experienced Infrastructure Governance leader to drive security governance across CSPM, firewall policy, and incident remediation. You will mentor engineers, expand coverage to data and application security, and champion automation to accelerate compliance across GCP, AWS, and Azure.

The role oversees SOX certifications, regulatory alignment, and integration with GRC platforms, ServiceNow, and cloud‑native tools.

Qualifications

• Experience: 4 to 6 years of progressive experience in security compliance governance, cloud security engineering, or an equivalent technical risk management role preferred.
• Leadership: Demonstrated experience leading, mentoring, or technically directing a team of engineering professionals.
• Cloud Expertise: Extensive, hands‑on knowledge of multi‑cloud environments, specifically Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).
• Framework Proficiency: Working knowledge of security frameworks, particularly NIST CSF (Cybersecurity Framework).
• Regulatory & Compliance Acumen: Solid understanding of industry regulations and compliance standards, including HIPAA, HITRUST, SOX, and GDPR.
• Systems Familiarity: Experience using and integrating GRC platforms, ServiceNow, and cloud‑native security tools (e.g., Prisma, Wiz, Sentinel, or cloud‑native CSPMs).

Responsibilities

• Lead and mentor a high‑performing team of Cloud Engineers, fostering professional growth and culture of proactive exposure management.
• Expand governance scope beyond CSPM and firewall rule monitoring into comprehensive security policy enforcement, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real‑time compliance results, reduce manual verification cycles, and accelerate auto‑remediation of cloud risks.
• Govern Firewall Rule Policies to guarantee alignment with network standards, and direct the rule certification program for all in‑scope firewalls.
• Oversee CSPM & Cloud‑Native Security Solutions to ensure robust, continuous alerting, monitoring, and audit reporting across GCP, Azure, and AWS.
• Orchestrate remediation campaigns for non‑compliant issues, leveraging ServiceNow and GRC platforms to assign, track, and verify resolution by solution owners.
• Manage critical certifications to ensure SOX server quarterly certifications are executed on time, addressing any findings with urgency.
• Analyze and address non‑compliance proactively, including deprecated network protocols, violations of least privilege, or any configurations drifting from internal Information Security policies.
• Ensure compliance with exception management policies and standards by maintaining accountability for approved exceptions and their timely remediation, renewal, or closure.

Skills

Leadership

Cloud security

GRC knowledge

Regulatory compliance

Stakeholder management

Education

Bachelor's degree or equivalent

Tools

GRC platforms

ServiceNow

CSPMs

Prisma

Wiz

Sentinel

GCP/AWS/Azure

Job description

Cardinal Health is seeking an experienced Infrastructure Governance leader to drive security governance across CSPM, firewall policy, and incident remediation. You will mentor engineers, expand coverage to data and application security, and champion automation to accelerate compliance across GCP, AWS, and Azure.

The role oversees SOX certifications, regulatory alignment, and integration with GRC platforms, ServiceNow, and cloud‑native tools.