Senior IT SOX Controls Engineer & Risk Advisor

Cardinal Health, Inc.; United States; On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical coverage

PTO

HSA

401k savings plan

MyFlexPay

Job summary

Cardinal Health, Inc. is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls across the organization.

You will report to the Manager, Information Security & Risk and partner with IT and business leaders to drive ongoing risk management and control improvements. The role requires deep IT SOX knowledge, experience in audit/compliance, and the ability to influence stakeholders while supporting due diligence for M&A activities and third-party

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 6+ years of IT SOX/audit/compliance experience.
• Strong knowledge of SOX and related frameworks (HIPAA, GDPR, PCI) a plus.
• Strong communication and problem-solving skills; ability to influence IT stakeholders.

Responsibilities

• Define, implement, and evaluate IT SOX controls in partnership with IT and business.
• Perform IT risk assessments for pilot areas and identify control gaps.
• Collaborate with IT stakeholders to design controls that meet SOX compliance goals.
• Improve IT controls processes to increase efficiency and reduce failure risk.
• Monitor execution of IT controls to ensure effectiveness.
• Support due diligence in M&A activities.
• Assist with third-party certifications (SOC1/2) reviews.
• Align with internal/external audits to define SOX scope and strategy.
• Track and drive remediation of IT control issues within risk governance.
• Manage junior staff and contractors to ensure quality deliverables.
• Support budgeting for compliance workstreams and communicate overruns.
• Assist manager with compliance posture reporting.

Skills

IT SOX controls

IT risk assessment

auditing & compliance

stakeholder education

root cause analysis

ERP knowledge (SAP)

risk governance

multi-tasking

CISA/CISM/CISSP

Education

Bachelor’s degree in related field

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health, Inc. is seeking a Senior Engineer, Information Security & Risk to define, implement, and evaluate IT SOX controls across the organization.

You will report to the Manager, Information Security & Risk and partner with IT and business leaders to drive ongoing risk management and control improvements. The role requires deep IT SOX knowledge, experience in audit/compliance, and the ability to influence stakeholders while supporting due diligence for M&A activities and third-party