Senior Manager, Cloud Governance & Compliance

Cardinal Health; Juneau (AK); Remote; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with my

Flexible spending accounts (FSAs)

Short- and long-term disability

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking a senior Infrastructure Governance leader to drive security governance across multi-cloud environments, oversee CSPM and firewall policies, and push for automation and AI-enabled compliance. You will guide a team of engineers, align with SOX and HIPAA requirements, and support regulatory audits.

The role emphasizes governance metrics, remediation campaigns, and collaboration with enterprise tech and InfoSec to onboard new acquisitions while maintaining risk standards.

Qualifications

• 4–6 years of progressive experience in security governance, cloud security engineering, or equivalent risk management.
• Demonstrated leadership directing engineering professionals.
• Extensive hands-on knowledge of multi-cloud environments (GCP, Azure, AWS).
• Working knowledge of security frameworks, especially NIST CSF.
• Strong regulatory and compliance awareness: HIPAA, HITRUST, SOX, GDPR.
• Experience with GRC platforms, ServiceNow, and cloud-native security tools.

Responsibilities

• Lead and mentor a high-performing Cloud Engineers team, promoting growth and proactive exposure management.
• Expand governance scope beyond CSPM into policy enforcement, vulnerability and data security management.
• Champion automation and AI to deliver real-time compliance results and auto-remediation.
• Govern firewall rule policies and certify all in-scope firewalls.
• Oversee CSPM and cloud-native security tools across GCP, Azure, AWS with continuous alerting.
• Orchestrate remediation campaigns via ServiceNow and GRC to verify resolution by owners.
• Manage SOX server certifications and address findings with urgency.
• Ensure non-compliance is proactively addressed, incl. deprecated protocols and least privilege violations.
• Maintain compliance with exceptions policy and timely remediation, renewal, or closure.
• Develop governance metrics and monthly KPI/KRI reports; support FDA audits and HITRUST reporting.
• Drive M&A security onboarding with Enterprise Tech and InfoSec teams; align with UVM.

Skills

Security governance

Cloud security engineering

Risk management

Leadership

GRC platforms

ServiceNow

CSPM

HIPAA/HITRUST/GDPR

SOX compliance

GCP/AWS/Azure

Prisma/Wiz/Sentinel

Education

Bachelor’s degree in related field

Tools

Prisma

Wiz

Sentinel

Cloud-native CSPMs

Job description

Cardinal Health is seeking a senior Infrastructure Governance leader to drive security governance across multi-cloud environments, oversee CSPM and firewall policies, and push for automation and AI-enabled compliance. You will guide a team of engineers, align with SOX and HIPAA requirements, and support regulatory audits.

The role emphasizes governance metrics, remediation campaigns, and collaboration with enterprise tech and InfoSec to onboard new acquisitions while maintaining risk standards.