Senior IT SOX Controls Engineer

Cardinal Health; Juneau (AK); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health seeks a Senior Engineer, Information Security & Risk to define, implement and evaluate IT SOX controls in a second line of defense role. You’ll collaborate with IT and business leaders to drive risk management processes and continuous control improvements.

The position covers control design, risk assessments, audit support (SOC1/2) and remediation tracking, mentoring junior staff, and budgeting for compliance workstreams. Strong IT control knowledge and certifications preferred.

Qualifications

• - Bachelor’s degree in related field or equivalent work experience.
• - 6+ years in IT audit or IT compliance; strong SOX knowledge.
• - Knowledge of HIPAA, GDPR, PCI is a plus.
• - Ability to educate/influence IT stakeholders on IT control compliance.
• - Strong root cause analysis and problem-solving skills.
• - Risk-based judgement and prioritization.
• - Self-motivated to learn new technologies and objectives.
• - Ability to multi-task with organization, efficiency and attention to detail.
• - Knowledge of IT tech including networks, databases, middleware, and SAP controls a plus.
• - Flowcharting skills preferred.
• - Experience with IT risk governance software (Archer, AuditBoard, ServiceNow GRC) a plus.
• - Certifications: CISA, CPA, CISM, CISSP, CRISC preferred.

Responsibilities

• Control design and remediation consulting.
• IT risk assessments and gap remediation guidance.
• Design and implement IT controls with IT stakeholders for SOX compliance.
• Process improvement of IT controls to increase efficiency and reduce failures.
• Evaluate and monitor IT controls for effectiveness.
• Support due diligence for M&A and third-party certifications reviews (SOC1/2).
• Coordinate with internal/external audit on SOX scope and strategy.
• Track remediation within IT risk governance process.
• Manage junior staff and contractors to ensure quality.
• Support compliance budgeting and report posture to management.

Skills

IT risk assessment

SOX compliance

Stakeholder influencing

Root cause analysis

Multitasking

IT technologies knowledge

Flowcharting

Archer/AuditBoard/ServiceNow GRC

CISA/CPA/CISM/CISSP/CRISC

Education

Bachelor’s degree or equivalent

Certifications: CISA, CPA, CISM, CISSP, CRISC

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health seeks a Senior Engineer, Information Security & Risk to define, implement and evaluate IT SOX controls in a second line of defense role. You’ll collaborate with IT and business leaders to drive risk management processes and continuous control improvements.

The position covers control design, risk assessments, audit support (SOC1/2) and remediation tracking, mentoring junior staff, and budgeting for compliance workstreams. Strong IT control knowledge and certifications preferred.