Senior IT Security & SOX Risk Engineer

Cardinal Health; Frankfort (KY); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Short- and long-term disability

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking a Senior Engineer to define and implement IT SOX controls and support risk management across the enterprise. You will align with IT and business leaders to design controls, remediate gaps, and drive governance with auditors.

Responsibilities include risk assessments, control testing, M&A support, and certification readiness, while collaborating with internal teams and external partners to strengthen compliance posture.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• Deep knowledge of IT SOX control and audit methodology with 6+ years in IT audit or IT compliance.
• Strong knowledge of SOX and other frameworks (HIPAA, GDPR, PCI) is a plus.
• Ability to educate IT stakeholders to achieve control compliance.
• Strong root cause analysis and problem-solving skills.
• Risk-based judgement and ability to manage competing priorities.

Responsibilities

• Control design and remediation consulting.
• Perform IT risk assessments for pilot areas and guide remediation.
• Design effective IT controls to support SOX compliance.
• Improve IT controls to boost efficiency and reduce failures.
• Monitor the execution of IT controls for effectiveness.
• Support due diligence for M&A activities.
• Assist with third-party certifications like SOC1/2.
• Coordinate with internal/external audits on SOX scope and strategy.
• Track remediation within IT risk governance processes.
• Manage junior staff and contractors to ensure quality.
• Help budget compliance workstreams and communicate overruns.
• Support the manager in compliance posture reporting.

Skills

SOX controls knowledge

IT risk assessment

Auditing

Stakeholder communication

Problem solving

Risk governance software

ERP controls (SAP)

IT controls knowledge

Education

Bachelor’s degree or equivalent

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking a Senior Engineer to define and implement IT SOX controls and support risk management across the enterprise. You will align with IT and business leaders to design controls, remediate gaps, and drive governance with auditors.

Responsibilities include risk assessments, control testing, M&A support, and certification readiness, while collaborating with internal teams and external partners to strengthen compliance posture.