Senior IT SOX Controls & Risk Engineer

cardinalhealth; United States; On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Accessibility to wages before payday

Flexible spending accounts (FSAs)

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health seeks a Senior Engineer, Information Security & Risk to lead IT SOX control design, assessment, and ongoing risk management. You will partner with business and IT leaders to implement controls, monitor compliance, and drive continuous improvement across our risk governance program.

The role demands deep SOX knowledge, strong analytical skills, and the ability to influence stakeholders while managing multiple priorities in a fast-paced environment.

Qualifications

• Bachelor's degree or equivalent work experience.
• Deep knowledge of IT SOX control and audit methodology with 6+ years in related field.
• Strong understanding of SOX and other compliance frameworks (HIPAA, GDPR, PCI) is a plus.
• Ability to educate and influence IT stakeholders on IT control compliance.
• Strong root cause analysis, problem-solving, and risk-based judgement.
• Self-motivated to learn and multi-task with attention to detail.
• Familiarity with IT networks, databases, middleware, and ERP controls (SAP is a plus).

Responsibilities

• Control design and remediation consulting.
• Perform IT risk assessment for pilot areas and guide gap remediation.
• Design effective IT controls to support SOX compliance goals.
• Improve IT controls to boost efficiency and reduce failures.
• Evaluate/monitor IT controls to ensure effectiveness.
• Support due diligence in M&A activities.
• Provide support for third party certifications (SOC1/2).
• Align with internal/external audit to define SOX scope and strategy.
• Track remediation within IT risk governance process.
• Manage junior staff and contractors to ensure quality.
• Assist budgeting for compliance workstream and report overruns.
• Support manager in compliance posture reporting.

Skills

IT risk management

SOX controls knowledge

Stakeholder communication

Leadership

Education

Bachelor's degree in related field

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health seeks a Senior Engineer, Information Security & Risk to lead IT SOX control design, assessment, and ongoing risk management. You will partner with business and IT leaders to implement controls, monitor compliance, and drive continuous improvement across our risk governance program.

The role demands deep SOX knowledge, strong analytical skills, and the ability to influence stakeholders while managing multiple priorities in a fast-paced environment.