Senior Security & Risk Engineer: SOX Controls & Compliance

Cardinal Health; Helena (MT); On-site; USD 125,000 - 179,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Flexible spending accounts (FSAs)

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead IT SOX controls design, implementation and ongoing evaluation. You will partner with IT and audit teams to ensure risk-aligned controls and continuous improvement across the organization.

The role emphasizes risk management, governance, and collaboration with internal and external auditors, with a focus on controls over ERP systems and IT processes. A strong SOX background is essential.

Qualifications

• Bachelor’s degree in related field or equivalent work experience.
• 6+ years of IT SOX controls/audit or IT compliance experience preferred.
• Knowledge of SOX, HIPAA, GDPR, PCI is a plus.

Responsibilities

• Define, implement and evaluate IT SOX controls.
• Perform IT risk assessments for pilot areas and guide remediation.
• Collaborate with IT stakeholders to design effective IT controls for SOX.
• Improve IT controls to increase efficiency and reduce control failures.
• Monitor execution of IT controls to ensure effectiveness.
• Support due diligence for M&A activities.
• Support for third-party certifications (SOC1/2).
• Align with internal/external audit on SOX scope and strategy.
• Track remediation within IT risk governance process.
• Manage assigned junior staff and contractors.
• Assist budgeting of compliance workstream and communicate overruns.
• Support compliance posture reporting.

Skills

IT SOX controls

Risk assessment

Stakeholder communication

Root cause analysis

Auditing & compliance

Education

Bachelor’s degree in related field

Tools

Archer

AuditBoard

ServiceNow GRC

Job description

Cardinal Health is seeking a Senior Engineer, Information Security & Risk to lead IT SOX controls design, implementation and ongoing evaluation. You will partner with IT and audit teams to ensure risk-aligned controls and continuous improvement across the organization.

The role emphasizes risk management, governance, and collaboration with internal and external auditors, with a focus on controls over ERP systems and IT processes. A strong SOX background is essential.