Senior InfoSec & SOX Controls Architect

Cardinal Health; Northern (KY); Hybrid; USD 125,000 - 179,000; Full time

Benefits offered by this job

Benefits package

Paid time off

401k savings plan

HSA

Parental leave

Disability coverage

Job summary

Cardinal Health seeks a Senior Engineer in Information Security & Risk to define, implement, and evaluate IT SOX controls across the organization. You will partner with IT leadership to drive risk-based control design and continuous improvement in a complex environment.

The role requires deep SOX knowledge, strong analytical skills, and the ability to educate stakeholders on compliance requirements while supporting budgeting and audit readiness across business units.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• Deep knowledge of IT SOX control and audit methodology; 6+ years in IT audit/compliance preferred.
• Strong knowledge of SOX and familiarity with HIPAA, GDPR, PCI a plus.

Responsibilities

• Design and remediation of IT controls to support SOX compliance.
• Conduct IT risk assessments and identify control gaps with remediation guidance.
• Collaborate with IT stakeholders to implement effective controls and improve processes.

Skills

IT SOX controls

Root cause analysis

Risk-based judgement

Stakeholder management

Multi-tasking

Networking & databases

ERP knowledge (SAP)

Auditing & compliance

Education

Bachelor’s degree in related field

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health seeks a Senior Engineer in Information Security & Risk to define, implement, and evaluate IT SOX controls across the organization. You will partner with IT leadership to drive risk-based control design and continuous improvement in a complex environment.

The role requires deep SOX knowledge, strong analytical skills, and the ability to educate stakeholders on compliance requirements while supporting budgeting and audit readiness across business units.