Senior Security Engineer, Cyber Risk Management

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company, providing customized solutions for hospitals, health systems, pharmacies, ambulatory surgery centers, clinical laboratories and physician offices worldwide.

The company provides clinically-proven medical products and pharmaceuticals and cost-effective solutions that enhance supply chain efficiency from hospital to home. Cardinal Health connects patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with approximately 50,000 employees in 46 countries, Cardinal Health ranks among the top 15 on the Fortune 500.

We currently have a full-time job opening for a Senior Security Engineer of Cyber Risk Management

Department overview:

Information Security and Risk Management (ISRM) at Cardinal Health enables Cardinal Health to securely deliver healthcare products and solutions that improve the lives of people every day by ensuring security and controls are embedded into Cardinal Health’s people, process and technology.  The Cyber Risk and Customer Security Assurance team fulfils our mission to strengthen our shield against cyber threats by providing a framework of processes and methodologies to manage Cardinal Health’s cybersecurity risks through issue and exception management, cyber risk management, and customer third party risk assessment engagement.  

Job Summary

Sr. Engineer, Cyber Risk Management, applies knowledge of Information Security, Risk Management, and Information Technology to lead the maturity of our Cyber Risk program.  The primary responsibility of this role is to collaborate across the enterprise to measure the impact and likelihood of a variety of Cyber Risks. 

This role is a senior position within the team and will work with all members of the Information Security team as well as Senior Leadership, Enterprise Risk Management, Business leaders, and IT teams.

Responsibilities:

• Provide senior leaders and executives with information summarized at the correct level to make efficient, cost-effective, risk management decisions about the technology and information processing supporting their business functions

• Work with all members of the Information Security team to drive information risk governance processes throughout the Cardinal Health enterprise

• Implement the information risk management framework and related governance processes to cover not just the IT function, but all technology and information processing regardless of where the processing is in the enterprise (e.g., “shadow IT”, manufacturing systems, operational technology, etc.)

• Leverage and integrate with existing IT risk management and risk escalation / approval processes

• Create an information risk register that catalogs key IT risks through an ongoing “top-down” risk assessment process

• Define processes for summarizing “bottom-up” risk identified throughout various risk and compliance activities to add to risk register

• Define and measure risk metrics that can be used to evaluate risk trends

Qualifications:

• Excellent written and verbal communication skills

• Experience in Information Technology, Information Security, and Risk Management

• Experience implementing and maintaining processes at large enterprises

• Experience with IT security principles, practices, technologies, programs and procedures, accompanied by an understanding of risk management methodologies and cybersecurity assessment frameworks

• High-quality analytical skills, relationship management competencies

• Relevant Information Security Certifications

Anticipated salary range: $121,600 - $182,385

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 4/27/2025 *if interested in opportunity, please submit application as soon as possible.

The salary ra