Skip to content

Open nowPosted yesterday

Sr Engineer, IT SOX Compliance

St. John's Health828 open roles

Where
IND07
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr Engineer, IT SOX ComplianceSt. John's Health · IND07
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on St. John's Health's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market. St. John's Health postings stay open a median of 21 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted yesterday

St. John's Health median: 21 days open

The posting

Company Overview:

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,11 Best GCCs to work for in India, Fortune Sector Leaders : Health Care #5, with a $254 billion. of revenue in FY26

About Cardinal Health International India (CHII) :

This role is part of the Information Security function for Cardinal Health International India Pvt Ltd (CHII). Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges.

Department overview:

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. The IT Governance and Compliance function within the organization develops, enhances, and maintains security policies and IT compliance programs in alignment with regulatory, legal, and contractual requirements, while collaborating closely with key stakeholders to maintain a security and compliant technology environment.

We are committed to building a resilient, secure, and compliant digital ecosystem, and you will play a critical role in safeguarding our information and supporting our mission to improve the lives of people every day.

We are seeking a detailed-oriented and proactive IT Compliance specialist to support our enterprise IT SOX Compliance Program.

Job Overview:

The Senior Engineer, Information Security & Risk is a second line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT SOX controls. Reporting to the Manager, Information Security & Risk , this role drives the detail design and implementation of IT SOX controls based on relevant risks. Furthermore, the position will work closely with Manager, Information Security & Risk to support business and IT leaders for ongoing risk management process and continuous control/process improvement.

Essential Duties and Responsibilities:

• Control design and remediation consulting –

Perform IT risk assessment for pilot areas, identify control gap, and provide guidance for gap remediation

Work with IT stakeholders to design effective IT controls to help the IT org achieve SOX compliance goals

Process improvement of IT controls that increases operational efficiency and reduces the likelihood of control failure

• Evaluate/monitor the execution of IT controls to ensure they are operating effectively

• Support due diligence phase of company's M&A activities

• Provide support for third party certifications (such as SOC1/2) review and issuance

• Align with internal and external audit to understand SOX scope and audit strategy

• Track and drive remediation of IT control issues within our IT risk governance process

• Manage assigned junior staff(s) and contractors to ensure the quality of the work

• Support budgeting of compliance workstream and responsible for proactively communicate budget overruns to key stakeholders

• Support the manager in compliance posture reporting

Qualifications:

• Bachelor’s degree in related field or equivalent work experience

• Deep knowledge of IT SOX control and audit methodology - 6 + years of experience in related field preferred, such as IT audit and/or IT compliance function

• Strong understanding and experience with SOX is a must and knowledge on other compliance requirements/frameworks, such as HIPAA, GDPR, PCI, is a plus

• Strong in educating/influencing of IT stakeholders to raise their awareness/mindset of IT control compliance

• Strong root cause analysis and problem-solving skill is a must

• Pro-level of risk-based judgement in addressing control issues and juggling competing priorities

• Self-motivated to learn new technologies and achieve objectives

• Ability to multi-task with organization, efficiency, accountability, and attention to detail

• Ability to communicate effectively and efficiently verbally and written with key stakeholders, such as financial control compliance function, audit, and IT leadership

• Strong knowledge in IT technologies and concepts including networks, databases, middleware, interfaces, and applications. Knowledge/experience of IT controls for mainstream ERP, such as SAP, is a plus

• Strong flowcharting skill is preferred

• Experience with IT risk governance software (i.e., Archer, AuditBoard, ServiceNow GRC) is a plus

• Professional certification preferred: CISA, CPA, CISM, CISSP, CRISC

Why Join Cardinal Health?

  • Work for a Fortune 20 healthcare leader impacting millions of lives.
  • Be part of a rapidly growing cybersecurity organization.
  • Solve meaningful security challenges at global enterprise scale.
  • Learn from experienced security leaders and technical experts.
  • Access continuous learning, mentorship, and career development opportunities.
  • Thrive in a collaborative, supportive, and innovation-driven culture.

Join us in securing the future of healthcare while building a rewarding and impactful career.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against St. John's Health's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on St. John's Health's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    St. John's Health's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.