• _What Information Security and Risk contributes to Cardinal Health_
• Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure or destruction. This job family develops system back-up and disaster recovery plans. Information Technology also conducts incident response, threat management, vulnerability scanning, virus management and intrusion detection and completes risk assessments.
• _Qualifications_
• + Cloud computing platforms (AWS, GCP, Azure) Cloud security tools and technologies (CloudWatch, CloudTrail, Azure Security Center) Programming languages (Python, Java, C+) Familiarity with DevOps tools (Jenkins, Docker, Kubernetes) Industry-specific certifications (CISSP, CCSP, AWS Certified Security - Specialty)
• _What is expected of you and others at this level_
• + development of enterprise security strategy aligned with NIST CSF1.1 with focus on People, Processes, and Technology
• Develops cloud security strategies aligned with NIST Cloud Security Technical Guide, AWS Well-Architected Framework, and Azure Security Center
• Designs cloud security architectures that integrate with existing on-premises infrastructure and meet regulatory requirements (HIPAA, PCI-DSS, GDPR)
• Collaborates with cross-functional teams to develop secure cloud-based solutions for various business units
• Provides expert-level guidance on cloud security best practices, threat mitigation strategies, and incident response procedures
• Conducts regular security assessments of cloud-based applications and infrastructure to identify vulnerabilities and recommend remediation actions
• Develops and maintains cloud security standards, and procedures that align with company-wide information security initiatives
• Ability to assist with additional IT Domains such as networking and artificial intelligence
• Contributes to the creation of information security technology strategies and roadmaps based on business strategy, cybersecurity assessments, IT trends and the overall threat landscape.
• Contributes to the development of information security architectures that align with assessment remediation requirements, reference architectures, design patterns and technology standards
• with Principal Architects to develop and document reference architectures and architectural patterns
• with IT and Business partners to deliver security technology roadmaps
• and masters innovative security technologies with focus on 1-3 year transformation of Cardinal Health
• Ensures project adherence to information security remediation efforts during solution build and implementation
• Participates in cybersecurity control assessments providing risk-based gap analysis and prioritized remediation recommendations
• Effectively communicates the impact of cybersecurity gaps to diverse audiences
• Builds consensus across peer teams in Information Security and drives transformational growth amongst all parties involved
• and educates less experienced employees in the organization
• Anticipated salary range:
• $119,800 - $171,100
• Bonus eligible:
• Yes
• Benefits:
• Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs
• Application window anticipated to close:
• 6/25/2024
• if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidates geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***/content/dam/corp/email/documents/corp/cardinal-health-online-application-privacy-policy.pdf)
•