Sr Engineer, IT SOX Compliance

## Sr Engineer, IT SOX Compliance Apply:
IND
07:
Full time:
Posted Today:

** Company Overview:
** Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,11 Best GCCs to work for in India, Fortune Sector Leaders :
Health Care #5, with a $254 billion. of revenue in FY26
** About Cardinal Health International India (CHII) :
** This role is part of the Information Security function for Cardinal Health International India Pvt Ltd (CHII). Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges.

** Department overview:
**** Information Security and Risk
** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. The IT Governance and Compliance function within the organization develops, enhances, and maintains security policies and IT compliance programs in alignment with regulatory, legal, and contractual requirements, while collaborating closely with key stakeholders to maintain a security and compliant technology environment.

We are committed to building a resilient, secure, and compliant digital ecosystem, and you will play a critical role in safeguarding our information and supporting our mission to improve the lives of people every day. We are seeking a
** detailed-oriented
** and
** proactive IT Compliance
** specialist to support our
** enterprise IT SOX Compliance Program.
**** Job Overview:
** The Senior Engineer, Information Security & Risk is a second line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT SOX controls. Reporting to the Manager, Information Security & Risk , this role drives the detail design and implementation of IT SOX controls based on relevant risks. Furthermore, the position will work closely with Manager, Information Security & Risk to support business and IT leaders for ongoing risk management process and continuous control/process improvement.

Essential Duties and Responsibilities:

• Control design and remediation consulting –Perform IT risk assessment for pilot areas, identify control gap, and provide guidance for gap remediation

Work with IT stakeholders to design effective IT controls to help the IT org achieve SOX compliance goals

Process improvement of IT controls that increases operational efficiency and reduces the likelihood of control failure
• Evaluate/monitor the execution of IT controls to ensure they are operating effectively
• Support due diligence phase of company's M&A activities   
• Provide support for third party certifications (such as SOC1/2) review and issuance
• Align with internal and external audit to understand SOX scope and audit strategy
• Track and drive…