Sr Analyst, Information Security

Job Description Summary

• Support IAM-related internal and external audit activities, including request intake, evidence collection, quality review, delivery, and follow-up.
• Partner with IAM operational teams, control owners, auditors, compliance partners, application owners, and technology stakeholders to address audit and control requirements.
• Maintain audit evidence, control documentation, standard operating procedures, control narratives, and repositories in an organized and audit-ready state.
• Review evidence submissions for completeness, accuracy, traceability, and alignment with control requirements before delivery.
• Track audit findings, control deficiencies, exceptions, management action plans, and remediation activities through closure.
• Support recurring compliance activities, control testing, risk assessments, and access governance reviews.
• Create reports and metrics that show audit readiness, evidence completion, control performance, and remediation status.
• Identify opportunities to standardize evidence collection, improve documentation quality, use automation and AI tools appropriately, and strengthen control maturity.

What Information Security Contributes to Cardinal Health

Information Security is responsible for managing information security operations. We exist to ensure availability, integrity and confidentiality of healthcare infrastructure that safeguards the patient.

• Responsible for defining, implementing, and maintaining information security policies, standards, procedures, and technologies.
• Collaborate with IT and business partners to ensure that security controls are appropriately designed and operating effectively.
• Identifies and manages information security risks to ensure compliance with enterprise security requirements.

Qualifications

• Bachelor's degree in a related field, or equivalent work experience
• 3-4 years’ experience in information security, identity and access management, audit, compliance, or related field, required
• 1 - 2 years’ experience supporting audit evidence, control testing, access reviews, remediation tracking, or other compliance activities, required
• Strong Microsoft Excel skills, including formulas, lookup functions, pivot tables, data validation, reconciliation, filtering, and analysis of large datasets
• Experience using Microsoft Copilot or other generative AI tools to improve analysis, reporting, documentation, evidence management, or operational efficiency

Functional Competencies

• Coordinate audit requests and evidence-gathering activities from intake through completion.
• Assess evidence quality and identify missing, inconsistent, or unsupported information before submission.
• Use Microsoft Excel to validate evidence, reconcile data, identify anomalies, monitor control performance, and prepare compliance reporting.
• Use Microsoft Copilot, other approved AI tools, or automation capabilities to streamline repeatable work while protecting confidential information and validating outputs for accuracy.
• Analyze operational and control data to identify trends, risks, gaps, recurring issues, and opportunities for improvement.
• Track findings, exceptions, corrective actions, and remediation commitments through timely closure.

What Is Expected at This Level

• Applies working knowledge of audit, compliance, risk, identity governance, and information security control concepts to perform varied tasks.
• Works on audit support, control validation, evidence management, reporting, and remediation activities of moderate scope and complexity.
• Identifies possible solutions to evidence, data quality, documentation, control, or remediation tracking issues and takes action to resolve them.
• Applies judgment within defined parameters and escalates risks, exceptions, or control concerns when appropriate.
• Receives general guidance and may receive more detailed instruction on new audits, control requirements, or governance improvement efforts.
• Work is reviewed for sound reasoning, accuracy, completeness, timeliness, and alignment with audit and compliance requirements.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

About Cardinal Health

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for healthcare facilities.

We are a crucial link between the clinical and operational sides of healthcare, delivering end‑to‑end solutions and data‑driving insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care.

With more than 50 years of experience, we seize the opportunity to address healthcare's most complicated challenges — now, and in the future.

Updating Your Personal Information

If your personal information has changed and needs edited, please contact your recruiter for assistance. If you have not yet been contacted by a recruiter, please email us at cardinalcareers@cardinalhealth.com for assistance.