Senior IT Security & Risk Controls Engineer

Cardinal Health, Inc.; Northern (KY); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

401k savings plan

Access to wages before pay day with my

FSAs

Disability coverage

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health, Inc. is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls. This second-line role reports to the Manager, Information Security & Risk and drives control design and continuous process improvement across IT risk governance.

The position partners with IT and business leaders to support ongoing risk management, regulatory alignment, and audit readiness, including support for SOC1/2 certifications and M&A diligence.

Qualifications

• Bachelor’s degree or equivalent work experience.
• Deep IT SOX control and audit knowledge.
• Experience with HIPAA, GDPR, PCI a plus.
• Ability to influence IT stakeholders on control compliance.
• Proven problem-solving and analytical skills.

Responsibilities

• Define and implement IT SOX controls.
• Perform IT risk assessments for pilots and gaps.
• Design effective IT controls with IT stakeholders.
• Improve processes to enhance control efficiency.
• Monitor control execution and remediation efforts.
• Support due diligence for M&A activity.
• Assist with third-party certifications reviews (SOC1/2).
• Coordinate with internal/external audit on SOX scope.
• Track remediation within IT risk governance.
• Manage junior staff and contractors.

Skills

IT SOX control knowledge

Audit methodology

Risk-based judgment

Root cause analysis

Stakeholder education

Multi-tasking & organization

IT controls understanding

ERP controls (SAP) knowledge

IT risk governance tooling

Education

Bachelor’s degree or equivalent

Professional certifications (CISA/CPA/CISM/CISSP/CRISC) preferred

Tools

Archer

AuditBoard

ServiceNow GRC

SAP knowledge

Job description

Cardinal Health, Inc. is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls. This second-line role reports to the Manager, Information Security & Risk and drives control design and continuous process improvement across IT risk governance.

The position partners with IT and business leaders to support ongoing risk management, regulatory alignment, and audit readiness, including support for SOC1/2 certifications and M&A diligence.