> Markdown version of [/jobs/ext/3358672-senior-engineer-information-security-risk](https://www.wearedevelopers.com/jobs/ext/3358672-senior-engineer-information-security-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Engineer - Information Security & Risk

- **Company:** Cardinal Health
- **Location:** Dover, DE, United States
- **Experience:** Expert
- **Salary:** $125,300.0 - $178,900.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Databases, Middleware, Information Technology Audit, SAP (Applications), IT General Controls (ITGC), Servicenow
- **Published:** September 18, 2026
- **Apply:** https://dejobs.org/x/x/B7E04D3C016E467C900AD63E4B214897/job/

## About the Role

* Bachelor's degree in related field or equivalent work experience
 * Deep knowledge of IT SOX control and audit methodology - 6 + years of experience in related field preferred, such as IT audit and/or IT compliance function preferred
 * Strong understanding and experience with SOX is a must and knowledge on other compliance requirements/frameworks, such as HIPAA, GDPR, PCI, is a plus
 * Strong in educating/influencing of IT stakeholders to raise their awareness/mindset of IT control compliance
 * Strong root cause analysis and problem-solving skill is a must
 * Pro-level of risk-based judgement in addressing control issues and juggling competing priorities
 * Self-motivated to learn new technologies and achieve objectives
 * Ability to multi-task with organization, efficiency, accountability, and attention to detail
 * Strong knowledge in IT technologies and concepts including networks, databases, middleware, interfaces, and applications. Knowledge/experience of IT controls for mainstream ERP, such as SAP, is a plus
 * Strong flowcharting skill is preferred
 * Experience with IT risk governance software (i.e., Archer, AuditBoard, ServiceNow GRC) is a plus
 * Professional certification preferred: CISA, CPA, CISM, CISSP, CRISC, Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

## Description

The Senior Engineer, Information Security & Risk is a second line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT SOX controls. Reporting to the Manager, Information Security & Risk , this role drives the detail design and implementation of IT SOX controls based on relevant risks. Furthermore, the position will work closely with Manager, Information Security & Risk to support business and IT leaders for ongoing risk management process and continuous control/process improvement., * Control design and remediation consulting -

 * Perform IT risk assessment for pilot areas, identify control gap, and provide guidance for gap remediation
 * Work with IT stakeholders to design effective IT controls to help the IT org achieve SOX compliance goals
 * Process improvement of IT controls that increases operational efficiency and reduces the likelihood of control failure
 * Evaluate/monitor the execution of IT controls to ensure they are operating effectively
 * Support due diligence phase of company's M&A activities
 * Provide support for third party certifications (such as SOC1/2) review and issuance
 * Align with internal and external audit to understand SOX scope and audit strategy
 * Track and drive remediation of IT control issues within our IT risk governance process
 * Manage assigned junior staff(s) and contractors to ensure the quality of the work
 * Support budgeting of compliance workstream and responsible for proactively communicate budget overruns to key stakeholders
 * Support the manager in compliance posture reporting