Senior IT Security & Risk Controls Engineer

Cardinal Health; Lincoln (NE); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health seeks an experienced Senior Engineer, Information Security & Risk to define and evaluate IT SOX controls. You will partner with IT and business leaders to implement controls, drive remediation, and support risk governance, audits, and M&A activities in a nationwide field environment.

The role demands deep IT SOX knowledge, audit experience, and strong stakeholder communication. A salary range is provided, with bonus eligibility and comprehensive benefits.

Qualifications

• Bachelor’s degree or equivalent work experience in related field.
• 6+ years in IT SOX, IT audit or IT compliance preferred.
• Knowledge of SOX, HIPAA, GDPR, PCI; IT controls and risk management.
• Ability to educate IT stakeholders on control compliance.
• Strong root cause analysis and problem solving skills.
• Pro‑active about learning new technologies and trends.

Responsibilities

• Design and remediate IT controls; support gap remediation.
• Perform IT risk assessments for pilot areas and identify control gaps.
• Design effective IT controls to meet SOX goals.
• Improve IT controls to boost efficiency and reduce failures.
• Monitor control execution for effectiveness.
• Support due diligence for M&A activities.
• Assist third party certifications (SOC1/2) reviews.
• Coordinate with internal/external audits on SOX scope.
• Track remediation within risk governance processes.
• Manage junior staff and contractors; ensure quality.
• Assist budgeting and flag overruns to stakeholders.
• Support compliance posture reporting.

Skills

IT risk governance

SOX controls

Risk assessment

Stakeholder communication

Leadership

Auditing

Problem solving

Learning new technologies

Education

Bachelor’s degree or equivalent work experience

CISA, CPA, CISM, CISSP, CRISC certifications

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health seeks an experienced Senior Engineer, Information Security & Risk to define and evaluate IT SOX controls. You will partner with IT and business leaders to implement controls, drive remediation, and support risk governance, audits, and M&A activities in a nationwide field environment.

The role demands deep IT SOX knowledge, audit experience, and strong stakeholder communication. A salary range is provided, with bonus eligibility and comprehensive benefits.