Senior IT SOX & Risk Controls Engineer

Cardinal Health; City of Albany (NY); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401k plan

Paid time off

Flexible spending accounts

Job summary

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead IT SOX control design, risk assessments, and ongoing control governance. You will partner with IT and business leaders to strengthen compliance and support audits.

The role emphasizes risk-based decision making, cross-functional collaboration, and continuous process improvement in a global healthcare environment.

Qualifications

• Bachelor’s degree or equivalent work experience in a related field.
• 6+ years’ IT SOX control and audit experience preferred.
• Solid knowledge of SOX; familiarity with HIPAA/GDPR/PCI is a plus.
• Ability to educate IT stakeholders on control compliance.
• Strong problem solving and root cause analysis skills.
• Risk-based judgement with multitasking and prioritization.

Responsibilities

• Design IT controls and remediation strategies for SOX compliance.
• Perform IT risk assessments for pilot areas and guide remediation.
• Collaborate with IT stakeholders to implement effective controls.
• Improve IT controls to boost efficiency and reduce failures.
• Monitor control execution and ensure effectiveness.
• Support due diligence for M&A activities.
• Assist with third-party security certifications (SOC1/2).
• Align with internal/external audits on scope and strategy.
• Track remediation within IT risk governance processes.
• Coordinate with juniors/contractors to ensure quality.

Skills

IT SOX controls

Risk assessment

Stakeholder education

Root cause analysis

Issue prioritization

Tech savvy

Education

Bachelor’s degree or equivalent

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead IT SOX control design, risk assessments, and ongoing control governance. You will partner with IT and business leaders to strengthen compliance and support audits.

The role emphasizes risk-based decision making, cross-functional collaboration, and continuous process improvement in a global healthcare environment.