Sr Analyst, Information Security

Job Description Summary 

• Support the planning, execution, monitoring, and closure of IAM certification and access review campaigns. 

• Partner with application owners, managers, reviewers, IAM teams, audit, and compliance partners to support timely and accurate access review decisions. 

• Monitor campaign progress, identify overdue reviews or remediation gaps, and coordinate follow-up actions through closure. 

• Review certification results, revocation activity, exception handling, and supporting documentation for completeness and accuracy. 

• Support reviewer enablement by helping provide clear instructions, context, and guidance for certification decision-making. 

• Assist with validation of access review populations, entitlement data, application ownership, and certification scope. 

• Maintain evidence and reporting needed to demonstrate control effectiveness, audit readiness, and compliance with access governance requirements. 

• Identify opportunities to improve certification quality, reduce manual coordination, strengthen remediation tracking, and improve the reviewer experience. 

What Information Security Contributes to Cardinal Health 

Information Security is responsible for managing information security operations. We exist to ensure availability, integrity and confidentiality of healthcare infrastructure that safeguards the patient. 

• Responsible for defining, implementing, and maintaining information security policies, standards, procedures, and technologies. 

• Collaborate with IT and business partners to ensure that security controls are appropriately designed and operating effectively. 

• Identifies and manages information security risks to ensure compliance with enterprise security requirements. 

Qualifications 

• Bachelor's degree in a related field, or equivalent work experience 

• 3-4 years’ experience in information security, identity and access management, audit, compliance, or related field 

• 1-2 years’ experience supporting access reviews, certifications, identity governance, application access, or audit evidence activities 

Functional Competencies 

• Support recurring IAM certification and access review campaigns, including campaign preparation, reviewer communications, progress monitoring, and closure activities. 

• Improve transparency and decision quality by helping reviewers understand access, ownership, risk context, and required actions. 

• Track revocations, remediation actions, exceptions, and evidence to support audit readiness and control effectiveness. 

• Analyze certification results and operational trends to identify opportunities for process improvement, automation, and better governance reporting. 

What Is Expected at This Level

• Applies working knowledge of audit, compliance, risk, identity governance, and information security control concepts to perform varied tasks.
• Works on audit support, control validation, evidence management, reporting, and remediation activities of moderate scope and complexity.
• Identifies possible solutions to evidence, data quality, documentation, control, or remediation tracking issues and takes action to resolve them.
• Applies judgment within defined parameters and escalates risks, exceptions, or control concerns when appropriate.
• Receives general guidance and may receive more detailed instruction on new audits, control requirements, or governance improvement efforts.
• Work is reviewed for sound reasoning, accuracy, completeness, timeliness, and alignment with audit and compliance requirements.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here