Engineer, Information Security

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner.  We define solutions that balance information security requirements against business needs. We are a remote-first team and are excited to offer full-time remote opportunities.

We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empower talented team members who mentor and uplift others, be led by leaders with a critical focus on employee development and well-being, provide dedicated training programs with a fun and collaborative atmosphere. 

Team overview:

The Information Security Project Engagement team is established within the Information Security and Risk organization and is organized alongside the Business Information Security Officer (BISO) team. Despite being organized into one team, the Project Engagement members are expected to create strong working relationships across the Information Security Department, Project Management teams, and the Global Technology Business Support (GTBS) Department.

 Job Overview:

We currently have a full-time career opening within the Information Security team to provide Information Security assessments and support to the project teams. This Engineer will help support the project intake process and be part of the project engagement lifecycle for the Information Security Department.  They will track security requirements, project demands, and ensure collaboration with key information security resources. Key responsibilities include:

·        Build and manage task trackers associated with Information Security projects and initiatives

·        Gather resource updates and be a point of contact for Project teams requiring Information Security support.

·        Incorporate a continuous feedback loop to continue to revise and improve Information Security Project Engagement.

·        Partner with Information Security teams, the project management office, and the Global Technology Business Support Organization to ensure proper ongoing project support.

·        Ensure that security controls are implemented in accordance with the project plan.

·        Serve as a security advisor for all projects.  This requires knowledge in Security Architecture, Privacy, Data Security, Regulatory Requirements, Resiliency, Application Security, Contract & Policy Considerations, Access Requirements, and other security considerations that must be addressed during project onboarding and planning.

·        Effectively communicate status updates and metrics to Senior Leaders for all upcoming and ongoing projects.

·        Assist in prioritizing information security initiatives.

Qualifications:

·        Proven strong communication and partnership skills

·        Must be able to track and manage multiple initiatives simultaneously

·        Highly organized and task oriented

·        Strong, comprehensive understanding of information security concepts

·        Knowledge of IT security e.g., systems, methodologies, technologies, architectures, practices, policies, working knowledge of security frameworks (NIST Cyber Security Framework preferred).

·        Basic understanding of a project lifecycle and project management styles