Senior IT Security & Risk Engineer - SOX Controls

Cardinal Health; Atlanta (GA); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Health savings account (HSA)

Job summary

Cardinal Health in Georgia seeks a Senior Engineer, Information Security & Risk to lead IT SOX controls design, implementation and ongoing evaluation. You will partner with IT and business leaders to assess risk, remediate gaps, and align with audit strategies across ERP systems including SAP.

You will mentor junior staff, coordinate with external auditors, and help drive continuous improvement in risk governance and compliance posture.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 6+ years IT SOX control and audit experience preferred.
• Strong SOX knowledge with HIPAA/GDPR/PCI familiarity.
• Ability to educate IT stakeholders on control compliance.
• Strong root-cause analysis and problem-solving.
• Risk-based judgement and prioritization.
• Willingness to learn new technologies.
• Multi-tasking with organization and attention to detail.
• Knowledge of IT architectures and SAP controls a plus.
• Certifications such as CISA, CPA, CISM, CISSP, CRISC preferred.

Responsibilities

• Design and remediate IT controls to support SOX goals.
• Perform IT risk assessments for pilot areas and identify gaps.
• Collaborate with IT stakeholders to design effective IT controls.
• Improve IT controls to increase efficiency and reduce failures.
• Monitor execution of IT controls for effectiveness.
• Support due diligence in M&A activities.
• Support third-party certifications (SOC1/2) review.
• Align with internal/external audits for SOX scope.
• Track remediation within IT risk governance process.
• Manage junior staff and contractors to ensure quality.
• Support budgeting for compliance and communicate overruns.
• Assist manager in compliance posture reporting.

Skills

IT SOX controls knowledge

Risk assessment

Stakeholder communication

Problem solving

Audit coordination

Education

Bachelor’s degree or equivalent work experience

Tools

Archer

AuditBoard

ServiceNow GRC

ERP SAP controls

Job description

Cardinal Health in Georgia seeks a Senior Engineer, Information Security & Risk to lead IT SOX controls design, implementation and ongoing evaluation. You will partner with IT and business leaders to assess risk, remediate gaps, and align with audit strategies across ERP systems including SAP.

You will mentor junior staff, coordinate with external auditors, and help drive continuous improvement in risk governance and compliance posture.