Senior IT SOX Controls Engineer

Cardinal Health; Topeka (KS); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Flexible spending accounts (FSAs)

Disability coverage

Work-Life resources

Paid parental leave

Job summary

Cardinal Health in the US-wide field is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls as a second line of defense. Reporting to the Manager, Information Security & Risk, you will drive design and implementation of IT SOX controls with business and IT leaders to manage ongoing risk.

The role requires deep SOX knowledge, strong analytical and communication skills, and the ability to manage multiple priorities in a complex environment.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 6+ years of IT SOX, IT audit, or IT compliance experience.
• Strong SOX knowledge; familiarity with HIPAA, GDPR, PCI is a plus.
• Ability to educate IT stakeholders on IT control compliance.
• Strong root cause analysis and problem-solving skills.
• Proactive risk-based judgement and prioritization.
• Multi-task with organization and attention to detail.
• Knowledge of IT technologies and ERP controls (SAP a plus).
• Professional certifications preferred: CISA, CPA, CISM, CISSP, CRISC.

Responsibilities

• Design, implement, and monitor IT SOX controls.
• Perform IT risk assessments for pilot areas and identify gaps.
• Collaborate with IT stakeholders to meet SOX goals.
• Improve IT controls to boost efficiency and reduce failures.
• Monitor control execution and remediation tracking.
• Support due diligence for M&A activities.
• Assist third-party certifications reviews (SOC1/2).
• Align with internal/external audit on SOX scope and strategy.
• Track remediation of IT control issues within risk governance.

Skills

IT SOX controls

IT risk assessment

SOX/compliance knowledge

root cause analysis

stakeholder management

communication

problem solving

ERP SAP knowledge

Education

Bachelor’s degree or equivalent

Certifications: CISA/CPA/CISM/CISSP/CRISC (preferred)

Tools

Archer

AuditBoard

ServiceNow GRC

SAP

Job description

Cardinal Health in the US-wide field is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls as a second line of defense. Reporting to the Manager, Information Security & Risk, you will drive design and implementation of IT SOX controls with business and IT leaders to manage ongoing risk.

The role requires deep SOX knowledge, strong analytical and communication skills, and the ability to manage multiple priorities in a complex environment.