Senior Cloud Governance & Security Leader (Remote)

Cardinal Health; Salt Lake City (UT); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental & vision

PTO

HSA

401k

MyFlexPay

FSAs

Disability

Work-Life resources

Parental leave

Wellness programs

Job summary

Cardinal Health is seeking a senior leader for Infrastructure Governance to oversee cloud security, policy enforcement, and compliance across GCP, Azure, and AWS. The role focuses on building a secure, automated, and auditable cloud environment with strong governance and risk management practices.

You will lead a team of engineers, drive CSPM and security tool integrations, and partner with IT and regulatory stakeholders to deliver a robust security program that meets SOX, HIPAA, and GDPR

Qualifications

• 4–6 years in security governance or cloud security
• Leadership experience managing engineering teams
• Knowledge of multi-cloud environments (GCP/AWS/Azure)
• Familiar with NIST CSF and regulatory/regulatory frameworks (HIPAA, HITRUST, SOX, GDPR)
• Experience with GRC platforms and cloud-native security tools

Responsibilities

• Lead and mentor a high-performing team of Cloud Engineers, fostering professional growth.
• Drive governance scope expansion beyond CSPM and firewall monitoring into full security policy enforcement, vulnerability, data, and application security management.
• Champion Automation & AI to deliver real-time compliance results and accelerate auto-remediation of cloud risks.

Skills

Security governance

Cloud security engineering

GRC platforms

Multi-cloud (GCP/AWS/Azure)

Education

Bachelor's degree

Tools

ServiceNow

Prisma

Wiz

Sentinel

CSPMs

Job description

Cardinal Health is seeking a senior leader for Infrastructure Governance to oversee cloud security, policy enforcement, and compliance across GCP, Azure, and AWS. The role focuses on building a secure, automated, and auditable cloud environment with strong governance and risk management practices.

You will lead a team of engineers, drive CSPM and security tool integrations, and partner with IT and regulatory stakeholders to deliver a robust security program that meets SOX, HIPAA, and GDPR