Total 8 information technology job vacancies in Legal / Public / Security category in us fl florida remote employees

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Summary of This Role

Develops, configures, documents, and maintains information security solutions.  Installs and configures web proxies, SIEMs, web application firewalls, intrusion detection systems, endpoint monitoring software, and vulnerability scanning systems.  Monitors and responds to alerts.  Ensures that threats and vulnerabilities to the organization’s business systems and applications (both in-house and cloud-based) are minimized.  Evaluates web application security controls and performs validation testing as needed.  Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes.  Monitors overall compliance with security standards and conducts periodic security reviews.

What Part Will You Play?

• Assists others delivering secure solutions and/or secure remediation solutions for moderately complex projects to the enterprise with good technical applications included.
• Supports others installing tools to specifically secure each level within security frame work for moderate projects.
• Researches and develops skills regarding new security technologies and trends while also helping to validate corporate conformance to industry standards utilizing set analysis criteria.
• Provides support for investigating intrusion incidents, conduct forensic investigations for moderate projects and helps others who provide incident responses.

What Are We Looking For in This Role?

Minimum Qualifications

• Bachelor's Degree
• Relevant Experience or Degree in: in Information Security or Computer Science preferred. Other majors will be considered.
• Typically Minimum 2 Years Relevant Exp
• Experience within Information Security or Information Technology. Experience managing projects. Additional 4 years related experience may be considered in lieu of a degree.
• Must be a US Citizen eligible to complete a Public Trust Background Check

Preferred Qualifications

• Cloud security experience
• DevSecOps
• Scripting knowledge such as Python and PowerShell
• One or more of the following-CISSP, CEH, CISA, CISM, eWPTX, OSWE, CRISC, CGEIT

What Are Our Desired Skills and Capabilities?

• Skills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgment within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.
• Supervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Network Engineering - Develops an understanding of TCP/IP network connectivity, subnet segmentation, security zones, secure ports/protocols, network authentication/authorization, security tools and their applicability (WAF, IPS, Sandbox, etc.).
• Vulnerability testing, risk analyses and security assessments - Knowledge of vulnerability testing, risk analyses and security assessments
• Technical industry acumen - Knowledge of Industry regulatory audit requirements and solutions and Authentication, authorization, and encryption solutions

This position is eligible to be considered for remote hiring

#LI-Remote

Global Payments Inc. is an equal opportunity employer.

Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.

​

Description

Overview

Harris is a leading provider of financial management and Customer Information Systems (CIS) software solutions; providing feature-rich and robust turnkey solutions to Public Sector, Schools, Utility, and Healthcare agencies throughout North America. We are a financially strong, growing and stable company guided by our values to do the right thing when it comes to our customers, our employees, and our local communities. At Harris, we offer employees the opportunity to learn and have fun, while empowering them to make a difference and directly contribute to the success of the organization!

The Harris Corporate IT Team is seeking an Information Security Governance Specialist who will provide risk management and governance oversight to ensure security controls and processes are appropriate to minimize risks and meet regulatory compliance requirements. As the Information Security Governance Specialist, you will utilize your wide area of expertise in risk management, cybersecurity, vulnerability management, information security governance, incident management, security frameworks and other areas to provide security compliance oversight for the Harris group of companies.

This position will communicate with the Corporate IT, Legal and Compliance teams, customer’s IT representatives and stakeholders, and other appropriate areas, as deemed necessary.

Duties

• Assist with the management of and participates in the information security, governance, and risk management programs according to established policy requirements.
• Monitor the information security, governance, and risk management programs to ensure organizational controls and processes are appropriate to minimize security risks and to ensure compliance with various security standards and regulatory requirements.
• Assist with the development, maintenance and publishing of up-to-date information security policies, standards, and guidelines.
• Advise executive leadership and provide oversight of policies, standards and procedures related to information security and regulatory requirements as it relates to security controls and processes.
• Lead and/or participate in various steering committees and other groups as appropriate.
• Assist with the development of and oversee effective disaster recovery policies and standards to align with enterprise business continuity management program goals.
• Responsible for conducting risk assessments against various regulatory compliance such as HIPAA, PCI, etc.
• Perform risk and security assessments of applications, databases, and servers and supporting network technologies, such as routers, switches, access points.
• Participate in annual security audits, incident response exercises, security reporting, audit, and compliance support.
• Develop and execute corrective action and remediation plans for identified issues, risks, or vulnerabilities.
• Assess potential risks and vulnerabilities to develop baselines and assist with response to deviations.
• Manage the training awareness program, monitor compliance, and develop security training.
• Review security control surveys, information security addendums and data protection addendums as required.
• Develops and maintains standard practices and procedures for appropriate response to identified threats.
• Analyzes and assesses with security incidents and escalates incidents by following incident plan.
• Work with information security team to provide security incident escalation support and remediate security issues.
• Assist with evidence collection for security audits and responding to security questionnaires.

Qualifications

• Minimum of 5 years experience in IT security risk management or governance experience.
• Minimum of 2 years experience as a system administrator, network administrator or in security operations may substitute 1 of the 5 years required experience above.
• Minimum of 2 years experience in cloud services security
• Knowledgeable about security controls and processes, vulnerabilities, regulatory and legal changes, and security standards that may impact information security
• Hands on experience managing various security and governance, risk and compliance tools (e.g., Vulnerability Scanning, GRC Tools, etc.)
• Experience in access control and identity management for on premise and cloud environments.
• Ability to write security requirements and design documents.
• Bachelor’s degree in Computer Science, Information Systems, Network Security Engineering or related major or equivalent work experience.
• CISSP, CRISC, CISA, CDPSE, HCISPP certifications would be considered an asset

The Opportunity:

Warnings about cyber threats are everywhere and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies and military organizations.  In all of this “cyber noise”, how can these organizations understand their risks and how to mitigate them? The answer is you – an information security risk specialist who will break down complex threats into manageable plans of action.

As an information security risk specialist on our team, you’ll use your experience to work with the DoD to discover their cyber risks, understand policies, and develop a mitigation plan. You’ll review technical, environmental, and personnel details from subject matter experts, engineers, and program managers to assess the entire threat landscape. Then, you’ll guide your client through a plan of action with presentations, white papers, and milestones. You’ll work with your client to translate security concepts, so they can make the best decisions to secure their mission critical systems or critical infrastructure. This is your opportunity to act as an information security subject matter expert while broadening your skills in cybersecurity and Risk Management Framework. Join us as we protect our military’s communications and our nation's cyberinfrastructure. 

Empower change with us.

You Have:

• 3+ years of experience with DoD Risk Management Framework and analyzing procedures and standard operating procedures

• Knowledge of Microsoft and Linux Operating Systems

• Ability to identify security requirements for connected and nonconnected systems and unclassified and classified systems

• Secret clearance

• Bachelor's degree

• DoD 8570 IAT or IAM Level I Certification

Nice If You Have:

• Experience as an operating system administrator, systems engineer, requirements analyst, information systems security officer, information systems security manager, or information systems security engineer

• Experience with using Microsoft Office products, including Word, Excel, PowerPoint, and Visio

• Experience with Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP), Assured Compliance Assessment Solution (ACAS), Ports, Protocols and Services Matrix, Vulnerability Remediation Asset Manager (VRAM), and Host Based Security System

• Ability to create tactics, techniques, procedures, white papers, standard operating procedures, workflows, system data flows and architectural diagrams, and RMF policies

• Navy Qualified Validator Level I, II, or III Certification

• DoD 8570 IAT or IAM Level II or III Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Create Your Career: 
Grow With Us 
Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms. 

A Place Where You Belong 
Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 
Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home. 

Your Candidate Journey 
At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

The Information Security Analyst's primary role is to respond to customer security questionnaires and inquiries.  This position will be responsible for supporting governance and oversight of risk and controls for the organization. Additionally, the position will report on security breaches, manage software to protect sensitive information, oversee monitoring of the company’s environment to identify and prevent breaches, and maintain the existing security plan.

The essential responsibilities of the Information Security Analyst are:

• Supports the strategic direction and priorities of the Information Security program, with a focus on processes, controls and ensuring compliance with regulatory and internal guidelines.
• Develops strategic partnerships with internal, customers and external auditors to manage Information Security risk management efforts and program enhancements that support the overall corporate mission.
• Provide evidence of compliance to customers and auditing teams.
• Manages risk effectively by translating regulatory requirements and business needs to develop security controls.
• Manages regulatory and audit findings and remediation of threat and risk issues.
• Develop data analytics, metrics, reporting, and statistical analyses supporting the Information Security program.
• Oversees monitoring of data threads from security tools; correlating those data feeds into a cohesive picture, then performing analysis to determine appropriate remediation action required.
• Accountable for tracking application vulnerabilities and penetration test findings and coordinating with the Engineering and/or Technical Operations to formulate remediation plans to ensure mitigation for potential vulnerabilities.

Qualifications:

• Bachelor’s degree in a computer related field or equivalent years of experience
• CISA, CISSP, CSSLP certification considered an asset

Skills/Experience:

• 3-5 years relevant work experience
• Prior IT Security experience preferred
• Comfortable working with customers
• Familiarity working with security auditors
• Hands on experience as a system administrator and/or with application or vulnerability scanning tools helpful
• Familiarity with relevant security frameworks
• Great organization and communication skills
• Ability to work independently

Cardinal Health Overview:

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for health care facilities.

We are a crucial link between the clinical and operational sides of care, working with more than 4,500 sourcing and manufacturing partners to deliver end-to-end solutions and data-driven insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care.

With 50 years of experience, approximately 44,000 employees and operations in more than 30 countries, Cardinal Health seizes the opportunity to address healthcare’s most complicated challenges — now, and in the future.

Department Overview:

Information Security and Risk Management (ISRM) at Cardinal Health enables Cardinal Health to securely deliver healthcare products and solutions that improve the lives of people every day by ensuring security and controls is embedded into Cardinal Health’s people, process and technology.

We currently have a career opening for a Sr. Engineer, Information Security and Risk, who will play an IT Privacy Compliance Program Run Lead role focused on driving IT Privacy Controls & Compliance for the organization.

Job Overview:

This role is a leader position within the team and requires having an in-depth understanding of local, national and international privacy and security regulations such as HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act) as well as relevant control frameworks to drive compliance to those regulatory requirements such as NIST, ISO, etc., while working with members of the Information Security and Risk Management team as well as privacy leaders in Legal, Ethics & Compliance and our various businesses throughout the Cardinal Health enterprise.  Senior Engineer will be responsible for managing operational activities (i.e., “Run”) of the IT Privacy Compliance Program, including confirming all assessments are completed, issue management and maintaining operational metrics. 

Daily Responsibilities:

• Leader over the “Run” activities of the IT Privacy Compliance Program as a Second Line of Defense (LOD) function.  Some of the key responsibilities include:
  • Create and manage calendar of IT Privacy Risk Assessments, while collaborating with appropriate risk functions to reduce redundancy of efforts, enhance reliance on Second LOD, and provide coverage across in-scope assets.
  • Lead management of all issues resulting from assessments to confirm appropriate stakeholder visibility and remediation recommendation, appropriate issue lead assignments, appropriate issue validation prior to closure, etc.
• Collaborate with IT Privacy Compliance Program Build Lead on driving overall success of the program.
• Build and implement metrics to report on effectiveness of the IT Privacy Compliance Program
• Partner with Legal counsel and Ethics & Compliance leaders to address regulatory or compliance requirements, issues, concerns or questions.
• Partner with IT and IT Security in the development of policies, procedures and practices in support of privacy and data protection compliance.
• Collaborate with IT and business leaders and team to provide guidance on doing privacy by design and remediating issues identified to enhance compliance to the regulatory requirements.
• Identify opportunities to automate various privacy and data protection compliance activities to reduce the overall cost of compliance.
• Mentor members of the team on how to effectively perform compliance assessments, complying to IT privacy regulation requirements, consultation on issue remediation recommendations and alternative solutions, etc.
• Effectively manage and implement change throughout the organization.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 10+ years’ experience in related field
• Prior experience with key IT Privacy regulation compliance including HIPAA and GDPR compliance.
• Prior experience with control frameworks (e.g., NIST, HITRUST, COBIT, COSO, and ISO) to drive IT Privacy regulatory compliance.
• Prior experience working with Internal or External Audit functions are a plus.
• Experience with IT risk and controls identification and assessments including IT control design and effectiveness testing.
• Experience with GRC (Governance, Risk and Compliance)
• Experience in analyzing data and creating reports/dashboards/views to provide visibility into risk and control landscape.
• Ideal candidate will have excellent communication skills (both verbal and written) with leaders at all levels within the organization, an ability to work in a matrixed environment to drive results, and the ability to clearly define and execute repeatable processes.
• Ideal candidate will have an effective time management, active listening, meeting facilitation, and influencing skills.
• Ability to effectively navigate a variety of challenging environments, prioritize work and determine when to escalate to upper management.
• Security or risk certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional) and/or CIPP (Certified Information Privacy Professional) certifications are a plus.

Anticipated salary range: $119,800 - $171,100

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

Leidos is searching to add support to our customer in a wide range of systems engineering, administration, and Cyber security & regulatory compliance services necessary to maintain and secure OPR information technology networks used in the detection and investigations of cybercrimes and CBP policy violations.

Primary Responsibilities:

Serve as an Information Systems Security Officer (ISSO) providing cyber security oversight for several major OPR applications and general support systems as assigned by the Government Information Systems Security Manager. The ISSO must be an acknowledged expert concerning current Federal, National, DHS and CBP standards, policies, requirements and procedures and shall provide technical security expertise in planning, coordinating, preparing and authoring security authorization documentation necessary to ensure OPR meets all Federal Information Systems Modernization Act (FISMA) regulatory requirements and DHS 4300-A Sensitive Systems Policy and CBP 1400-05D Information Security Policy. The role shall support the Government Information Systems Security Manager by performing the following duties:

• Develop, draft, review and endorse all information systems security plans and other security authorization artifacts and documents such as:
  • Standards for Security Categorization of Federal Information and Information Systems (FIPS 199) Assessment
  • E-Authentication Determination
  • Privacy Threshold Determination
  • Privacy Impact Assessment (PIA)
  • Risk Assessment Plans
  • System Security Plans
  • Controls Testing (Security Test and Evaluation (ST&E)) Plans
  • Configuration/Change Management Plans
  • Contingency Plans
  • Contingency Plan Test and Test Results
  • Section 508 of the Rehabilitation Act plans
  • Plans of Actions & Milestones (POA&Ms)
  • Policy waiver and risk acceptance requests
• Ensure that assigned systems are operated, maintained, and disposed of in accordance with applicable policies and procedures NIST SP 800-37, Rev 2, Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy, DHS 4300A Policy and Handbook, CBP Information Systems Security Policies and Procedures Handbook (HB 1400-05), and internal CBP (i.e., Office of Information Technology, Security Operations Division, etc.) security policies and practices
• Develop, review, maintain, and provide system security documentation for assigned systems, including System Security Plans, Interconnection Security Agreements, Contingency Plans, Plans of Action and Milestones, (POA&M), Waivers, and Exceptions through the DHS FISMA system management tool in use to implement and manage the NIST Risk Management Framework.
• Complete all activities required by the DHS Ongoing Authorization (OA) Program to transition assigned systems into the DHS OA Program and perform all required actions to maintain system authorization under OA once the system is admitted to the Program
• Assist the Government with the reporting and management of system level security violations and incidents.
• Assist the Government with the technical security evaluation of threats and vulnerabilities involving new/enhanced technology.
• Assist the Government with providing oversight to vulnerability scanning processes and procedures and security patch management/flaw remediation processes and procedures.
• Assist with development of cyber security SOPs, playbooks, work instructions, and other procedures and processes to mature cyber security capabilities.

Basic Qualifications:

• A minimum of a Bachelor’s degree coupled with 8 - 12 years’ experience in the Information Technology arena or Master's Degree with 6+ years of relevant experience.
• Minimum of 5 years of experience as an ISSO supporting major federal information systems/applications
• Bachelor Degree in Computer Science, IT, Information/Cyber Security field from an accredited college or university
• Knowledge with auditing security controls and financial processes
• Superior writing, communication  and critical analysis skills
• Deep understanding of Information Assurance, Information Technology and Information Management concepts, processes and procedures
• Working knowledge of the following policies: NIST SP 800-37, Rev 2, Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy, DHS 4300A Policy and Handbook, CBP Information Systems Security Policies and Procedures Handbook (HB 1400-05),

Preferred Qualifications:

• ISC2 Certified Authorization Professional (CAP) or ISC2 Certified Cloud Security Professional (CCSP) certification or CompTIA Certified Advanced Security Practitioner (CASP+)
• Prior experience with CBP/DHS

Clearance: All CBP SOC employees are required to successfully complete a CBP Background Investigation to support this program

First 90 days are onsite then a telework schedule would be coordinated.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner. We are a remote-first team and are excited to offer full-time remote opportunities. We currently have a full-time career opening for an Information Security and Risk Engineer role within the Information Security Organization. This role will report to the manager of IT control compliance council within our Information Security Team and will serve as the first line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT controls.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 4+ years’ experience in related field preferred, such as IT audit, IT compliance function
• Strong understanding and experience with SOX and/or other regulatory compliance processes
• Team Player and Collaborative – Ability to work well with team members to achieve the desired results
• Willing to independently navigate through complex scenarios and uncharted compliance topics
• Ability to multi-task with organization, efficiency, accountability, and attention to detail
• Driven and self-motivated to learn new technologies and achieve objectives
• A great & effective verbal and written communicator
• Professional certification preferred: CISA, CISSP, CISM, CRISC

Essential Duties and Responsibilities:

• Perform IT risk assessment for pilot areas and identify control gap
• Work with IT stakeholders to design effective IT controls and monitor the execution to manage risk and ensure compliance with regulations (e.g., SOX, HIPAA, GDPR)
• Design IT controls that increase operational efficiency and reduces the likelihood of control failure (e.g., automated and preventative controls vs. manual and detective)
• Challenge status quo - recommend new or improved controls to keep IT applications current with industry standards and compliance requirements.
• Carry out analysis on third party audit reports, such as SOC 1/2, to identify potential control issues.
• Track and drive remediation of IT control issues within our IT risk governance process Strong in educating/influencing of IT stakeholders to raise awareness and promote a mindset focused on IT controls and compliance
• Oversee information security compliance activities, including daily, weekly, quarterly and/or annual security risk assessments – both performing internal assessments and responding to external assessments.
• Collaborate cross-functionally within the information security and risk management department to ensure alignment with existing compliance, risk management and information security activities
• Research new security compliance requirements and assist in the evaluation of compliance control requirements.
• Any other duties that may be required as assigned

Experiences:

• Experience participating in external control audits; SOX and/or SOC1/2 Type II audit experiences are preferred
• Solid working knowledge of governance frameworks including NIST, ISO27000, FedRAMP
• Experience with Corrective Action Plans (CAP) to remediate deficiencies identified through monitoring, auditing, or a Compliance Issue Report (CIR). These activities should consist of improvements to health plan processes or vendor processes taken to eliminate causes of non-compliance or other issues
• Strong personality, ability, and credibility to influence key decision-makers, and highly technical resources.
• Strong Knowledge/experience of IT controls for mainstream ERPs, such as SAP, is a plus
• Strong in root cause analysis and problem solving
• Strong flowcharting skill is a plus
• Experience with IT risk governance software (i.e. Archer, AuditBoard, ServiceNow GRC) is a plus

Anticipated salary range: $92,100 - $131,600

Bonus eligible: No

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

• Manage Sodexo’s Information Security Management System (ISMS) and other information security compliance activities to maintain various certifications, including ISO27001, Cyber Essentials + and PCI DSS
• Conduct Information Security Third Party Assurance on Sodexo suppliers to mitigate Risk throughout the lifecycle of supplier relationships
• Support the wider Sodexo business with appropriate action plans and risk assessments for new contracts and other activities
• Improve Sodexo UK&I's information security practices by engaging with Sodexo Global colleagues, leveraging knowledge and technology from the wider business to improve regional practices

• Experience creating ISMS documentation to gain ISO27001 certification
• Practical experience of Cyber Essentials +, PCI DSS and UK government & MOD accreditations
• Prior work performing internal or external IT and security audits, as well as dealing with third party supplier audits
• Strong stakeholder management skills, with the ability to share important security updates with technical and non-technical colleagues
• The ability to achieve UK SC Security Clearance is a requirement of this role

• Flexible, dynamic and inclusive work environment
• Fantastic flexible benefits
• Access to ongoing training and development programs
• Countless opportunities to grow within the company