Senior IT SOX & Risk Controls Engineer

Cardinal Health; Augusta (ME); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Paid time off

Job summary

Cardinal Health is seeking an experienced Senior Engineer, Information Security & Risk, to define, implement, and evaluate IT SOX controls as a second line of defense. You will work with IT and business leaders to support ongoing risk management and continuous control improvements.

You will lead design and remediation efforts, collaborate on risk assessments, and ensure controls operate effectively while aligning with audit strategies and external certifications.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 6+ years IT SOX control and audit knowledge/experience.
• Strong understanding of SOX; HIPAA/GDPR/PCI knowledge is a plus.
• Ability to educate/influence IT stakeholders on IT control compliance.
• Strong root cause analysis and problem-solving skills.
• Pro-level risk-based judgement for IT control issues.
• Self-motivated to learn new technologies and achieve objectives.
• Ability to multi-task with organization, efficiency, accountability, and attention to detail.
• Knowledge of IT technologies including networks, databases, middleware, interfaces, and applications; SAP knowledge is a plus.
• Flowcharting skills preferred.
• Experience with IT risk governance software: Archer, AuditBoard, ServiceNow GRC.
• Professional certifications: CISA, CPA, CISM, CISSP, CRISC.

Responsibilities

• Control design and remediation consulting.
• Perform IT risk assessments for pilot areas and identify control gaps.
• Design effective IT controls with IT stakeholders for SOX compliance goals.
• Process improvement of IT controls to increase efficiency and reduce failures.
• Evaluate/monitor IT controls to ensure effectiveness.
• Support due diligence for M&A activities.
• Support third-party certification reviews (SOC1/2).
• Align with internal/external audit to define SOX scope and strategy.
• Track and remediate IT control issues in risk governance.

Skills

IT SOX controls

Risk assessment

IT audit

Root cause analysis

Problem solving

Stakeholder engagement

Education

Bachelor's degree or equivalent

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking an experienced Senior Engineer, Information Security & Risk, to define, implement, and evaluate IT SOX controls as a second line of defense. You will work with IT and business leaders to support ongoing risk management and continuous control improvements.

You will lead design and remediation efforts, collaborate on risk assessments, and ensure controls operate effectively while aligning with audit strategies and external certifications.