Senior IT Security & Risk Engineer (SOX & Controls)

Cardinal Health; Cheyenne (WY); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

HSA

401k savings plan

Paid time off

Paid parental leave

Disability coverage

Job summary

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead the design, implementation, and evaluation of IT SOX controls. This role partners with IT leadership to drive risk-based control programs and continuous improvement across the organization.

You will perform risk assessments, design effective controls, and monitor control performance while supporting due diligence for M&A and third-party certifications. A strong SOX background and able leadership are essential.

Qualifications

• Bachelor’s degree or equivalent work experience.
• 6+ years in IT audit or IT compliance with IT SOX focus.
• Strong knowledge of SOX and related compliance frameworks (HIPAA, GDPR, PCI).
• Ability to educate IT stakeholders on control compliance and risks.
• Excellent root cause analysis and problem-solving skills.
• Proficient in risk-based judgment and prioritization.

Responsibilities

• Define, implement, and evaluate IT SOX controls.
• Perform IT risk assessments for pilot areas and guide remediation.
• Design effective IT controls with IT stakeholders to meet SOX goals.
• Improve IT controls to increase efficiency and reduce control failure risk.
• Monitor control execution for effectiveness and compliance posture.
• Support due diligence in M&A and third-party certifications (SOC1/2).
• Coordinate with internal/external audit on SOX scope and strategy.
• Track remediation within IT risk governance process.
• Manage junior staff and contractors to ensure quality.
• Assist budgeting for compliance workstreams and report overruns.

Skills

IT SOX

Audit methodology

Risk assessment

Root cause analysis

Stakeholder education

Multi-tasking

SAP knowledge

GRC tools

Education

Bachelor's degree or equivalent

Tools

Archer

AuditBoard

ServiceNow GRC

SAP

Job description

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead the design, implementation, and evaluation of IT SOX controls. This role partners with IT leadership to drive risk-based control programs and continuous improvement across the organization.

You will perform risk assessments, design effective controls, and monitor control performance while supporting due diligence for M&A and third-party certifications. A strong SOX background and able leadership are essential.