Senior IT Security & Risk Engineer (SOX)

Cardinal Health; Providence (RI); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Parental leave

Disability coverage

Job summary

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to define and evaluate IT SOX controls. This role partners with leaders to support risk management and continuous control improvement.

You will design controls, assess IT risks, and drive remediation with IT stakeholders. The position requires deep IT SOX knowledge, 6+ years in IT audit/compliance, and collaboration with audit teams to ensure regulatory alignment.

Qualifications

• Bachelor’s degree or equivalent work experience.
• 6+ years of IT SOX, audit or IT compliance experience preferred.
• Strong knowledge of IT SOX controls; HIPAA/GDPR/PCI is a plus.
• Capable of educating IT stakeholders on controls and compliance.

Responsibilities

• Define and implement IT SOX controls across risk areas.
• Perform IT risk assessments for pilot areas and guide remediation.
• Collaborate with IT stakeholders to design effective IT controls.
• Improve IT controls for efficiency and reduced risk of failures.
• Monitor execution of IT controls for ongoing effectiveness.
• Support due diligence in M&A and third-party certification reviews.
• Coordinate with internal/external audit for SOX scope and strategy.
• Track remediation in IT risk governance and manage junior staff.

Skills

IT SOX controls

Risk assessment

IT audit

Stakeholder engagement

Root cause analysis

Problem solving

Multi-tasking

ERP IT controls

Education

Bachelor’s degree in related field or equivalent work experience

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to define and evaluate IT SOX controls. This role partners with leaders to support risk management and continuous control improvement.

You will design controls, assess IT risks, and drive remediation with IT stakeholders. The position requires deep IT SOX knowledge, 6+ years in IT audit/compliance, and collaboration with audit teams to ensure regulatory alignment.