Senior IT SOX Controls Engineer

Cardinal Health; Hagåtña (GU); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

401k savings plan

Health savings account (HSA)

Paid parental leave

Disability coverage

Work-Life resources

Competitive benefits

Job summary

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls. The role partners with the Manager to support ongoing risk management and continuous control improvement across the organization.

You will drive control design, assess risks, and coordinate with auditors. The ideal candidate has 6+ years in IT SOX, strong SOX knowledge, and certifications such as CISA/CISM/CISSP.

Qualifications

• Bachelor’s degree in related field or equivalent work experience
• 6+ years of experience in IT SOX risk, audit, or compliance
• Strong SOX knowledge; HIPAA, GDPR and PCI knowledge a plus
• Strong ability to educate/influence IT stakeholders on IT control compliance
• Strong root cause analysis and problem-solving skills
• Risk-based judgement in addressing control issues and prioritization
• Self-motivated to learn new technologies and achieve objectives
• Ability to multi-task with organization, efficiency, accountability, and attention to detail
• Knowledge of IT technologies including networks, databases, middleware, interfaces, and applications; SAP experience a plus
• Flowcharting skill preferred
• Experience with IT risk governance software (Archer, AuditBoard, ServiceNow GRC) is a plus
• Professional certifications: CISA, CPA, CISM, CISSP, CRISC

Responsibilities

• Design and remediation consulting for IT controls
• Perform IT risk assessments and identify control gaps
• Collaborate with IT stakeholders to design effective IT controls for SOX
• Improve IT controls to increase efficiency and reduce failures
• Monitor execution of IT controls to ensure effectiveness
• Support due diligence for M&A activities
• Provide support for third-party certifications review and issuance
• Align with internal/external audits to define SOX scope and strategy
• Track remediation of IT control issues within IT risk governance
• Manage junior staff and contractors to ensure quality of work
• Support budgeting for compliance workstreams and communicate overruns
• Assist the manager in compliance posture reporting

Skills

SOX controls

IT risk assessment

control design

auditing coordination

risk governance

M&A support

vendor reviews

leadership

budgeting

auditors communication

CISA

CISM

CISSP

CRISC

HIPAA

GDPR

PCI

Archer

AuditBoard

ServiceNow GRC

Education

Bachelor’s degree in related field

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls. The role partners with the Manager to support ongoing risk management and continuous control improvement across the organization.

You will drive control design, assess risks, and coordinate with auditors. The ideal candidate has 6+ years in IT SOX, strong SOX knowledge, and certifications such as CISA/CISM/CISSP.