UNKNOWN

ADAPTED_NOW

We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empower talented team members who mentor and uplift others, be led by leaders with a critical focus on employee development and well-being, provide dedicated training programs with a fun and collaborative atmosphere. Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management.

YEAR

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500. Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner. We define solutions that balance information security requirements against business needs. We are a remote-first team and are excited to offer full-time remote opportunities. We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empower talented team members who mentor and uplift others, be led by leaders with a critical focus on employee development and well-being, provide dedicated training programs with a fun and collaborative atmosphere. Team overview: The Information Security Project Engagement team is established within the Information Security and Risk organization and is organized alongside the Business Information Security Officer (BISO) team. Despite being organized into one team, the Project Engagement members are expected to create strong working relationships across the Information Security Department, Project Management teams, and the Global Technology Business Support (GTBS) Department. Job Overview: We currently have a full-time career opening within the Information Security team to provide Information Security assessments and support to the project teams. This Engineer will help support the project intake process and be part of the project engagement lifecycle for the Information Security Department. They will track security requirements, project demands, and ensure collaboration with key information security resources. Key responsibilities include: · Build and manage task trackers associated with Information Security projects and initiatives · Gather resource updates and be a point of contact for Project teams requiring Information Security support. · Incorporate a continuous feedback loop to continue to revise and improve Information Security Project Engagement. · Partner with Information Security teams, the project management office, and the Global Technology Business Support Organization to ensure proper ongoing project support. · Ensure that security controls are implemented in accordance with the project plan. · Serve as a security advisor for all projects. This requires knowledge in Security Architecture, Privacy, Data Security, Regulatory Requirements, Resiliency, Application Security, Contract & Policy Considerations, Access Requirements, and other security considerations that must be addressed during project onboarding and planning. · Effectively communicate status updates and metrics to Senior Leaders for all upcoming and ongoing projects. · Assist in prioritizing information security initiatives. Qualifications: · Proven strong communication and partnership skills · Must be able to track and manage multiple initiatives simultaneously · Highly organized and task oriented · Strong, comprehensive understanding of information security concepts · Knowledge of IT security e.g., systems, methodologies, technologies, architectures, practices, policies, working knowledge of security frameworks (NIST Cyber Security Framework preferred). · Basic understanding of a project lifecycle and project management styles · Comfortable working with cross-functional teams to accomplish common goals · Must be a team player and partner Anticipated salary range: $93,500 - $140,280 Bonus eligible: No Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with myFlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs Application window anticipated to close: 9/15/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (https://www.cardinalhealth.com/content/dam/corp/email/documents/corp/cardinal-health-online-application-privacy-policy.pdf)

Cardinal Health

Engineer, Information Security

This includes, but is not limited to education and training requirements, reporting and intake protocols, monitoring and implementation of new or changing regulatory requirements, risk assessment and audit execution, risk treatment plans, policy and procedure maintenance, response and investigation procedures and compliance expectations. + Participate in the development and implementation of the enterprise’s risk strategy for effective risk and compliance program governance; intended to strategically and proactively mitigate risk, and promptly detect and correct instances of non-compliance.

Company : Highmark Inc. Job Description : JOB SUMMARY This job is responsible for planning, designing, implementing, and maintaining the Compliance Program and its related policies to ensure the business acts within the parameters of federal and state laws, regulations, and regulatory guidance. The incumbent is also responsible for the administration, interpretation, and enforcement of the Compliance Program including auditing/monitoring operational processes, conducting or overseeing compliance investigations, and ensuring that adequate training takes place under the Compliance Program. In this capacity, the incumbent is responsible for the collaborative and iterative development of the risk and compliance plan for these entities across all areas in the enterprise risk taxonomy. Through matrixed leadership with Risk Operations and with support from Risk Enablement, the incumbent monitors and tracks the delivery of risk activities, including but not limited to internal and external audit progress, recurring risk and compliance reporting, mandated training, investigations, and the impacts of new and changing laws, regulations, and contractual relationships. The incumbent must have extensive knowledge of the applicable federal and state rules as well as a solid working knowledge of managed care operations, compliance program structures, information security and audit methodologies. The incumbent must also have a foundational understanding of privacy regulations, including in-depth knowledge of HIPAA and possess the ability to perform a privacy risk assessment. The incumbent must have the highest level of integrity and ethics and demonstrate professional representation of the company. ESSENTIAL RESPONSIBILITIES + Matrixed working relationship with Risk Operations and Strategic Risk Partner to define the development, implementation and maintenance of an effective compliance and risk management program for the supported entities. This includes, but is not limited to education and training requirements, reporting and intake protocols, monitoring and implementation of new or changing regulatory requirements, risk assessment and audit execution, risk treatment plans, policy and procedure maintenance, response and investigation procedures and compliance expectations. + Acts as a thought partner and advisor to business leaders to ensure business decisions are managed according to the enterprise risk strategy / framework.Participates in and understands the business operations and strategy.Serves as a single point of contact for the business’ risks, compliance, privacy and security needs, and partners closely with legal counsel on all efforts. + Provide proactive guidance, education, and information to senior management, so that leaders remain informed and aware of risks, requirements, mitigation strategies, and management’s responsibilities.Leads and participates in discussions or presentations to existing Compliance or Risk Committees and the Audit & Compliance Committee meetings of the Board. Gathers data and prepares reports for senior management and Board of Directors as needed. Ensure reporting obligations are met.Participates on various risk committees and may represent their entity when appropriate. + Informs business of risk related activity for that BU, ensures awareness and monitors execution.Tracks, monitors and reports on risk operations for the assigned Business Unit (BU) using the standard metrics and reporting created by risk enablement. + Through understanding of the business strategy, proactively identifies and addresses risk in partnership with the risk operations and legal functions, and the business leaders.Serves as a single point of contact to respond and intake risk from the senior leadership team, and follows protocol to triage. + Participate in the development and implementation of the enterprise’s risk strategy for effective risk and compliance program governance; intended to strategically and proactively mitigate risk, and promptly detect and correct instances of non-compliance. This includes but is not limited to formal risk assessment processes and the development and implementation of an annual audit plan. + Liaise with external regulators or enforcement bodies interacting with the assigned BU per defined communication and legal protocols. + Ensure completion of all education and training initiatives and requirements and identify priorities for focus for the accountable entities. + Respond to reports of real or potential instances of non-compliance, including coordination and facilitation of internal investigations including the analysis of facts, recommendations for resolution, risk treatment and corrective action plans. Work with legal counsel to ensure timely notice or disclosure of incidents or issues as appropriate/required. Ensure all reported matters are addressed in a timely and responsible manner in compliance with corporate policy, state and federal law and best practices. + Maintain a strong working knowledge of the regulatory landscape. + Other duties as assigned or requested. EDUCATION Required + Bachelor's Degree in Business, Finance, Health Administration, Public Health, Public Administration, Legal, Accounting or related field, or relevant experience and/or education as determined by the company in lieu of bachelor's degree. Preferred + Master’s Degree in Business, Finance, Health Administration, Public Health, Public Administration, Legal, Accounting or related field EXPERIENCE Required + 7 years in compliance, privacy, government affairs, healthcare operations, risk, audit, or legal functions + 5 years in a management or leadership role ​ Preferred + 10 years in compliance, privacy, government affairs, healthcare operations, risk, audit, or legal functions + 5 years in Healthcare Compliance or Privacy LICENSES or CERTIFICATIONS Required + None Preferred (Any of the Following) + Certified Public Accountant (CPA) + Certified Internal Auditor (CIA) + Certified Fraud Examiner (CFE) + Certified in Healthcare Compliance (CHC) + Certified Compliance and Ethics Professional (CCEP) SKILLS + Broad-based business knowledge as well as in-depth knowledge of the insurance industry, strategic compliance planning, regulatory concerns, compliance requirements, and corporate integrity principles. + Excellent oral, written, and presentation skills, as well as conceptual and analytic skills in order to review and articulate corporate objectives and regulations across all relevant audiences. + High-level of skill in leading interdepartmental and cross-functional strategy development. + Experience with managed care, Medicare and federal and/or state regulations, quality improvement and compliance oversight. + The ability to comprehend and interpret regulatory, legislative, and contractual mandates. + Experience managing multiple projects and managing professional staff on numerous projects to ensure corporate deadlines and objectives are met. + The utmost integrity in the discreet and confidential handling of confidential materials is necessary Language (Other than English): None Travel Requirement: 0% - 25% PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS Position Type Office-based Teaches / trains others regularly Occasionally Travel regularly from the office to various work sites or from site-to-site Frequently Works primarily out-of-the office selling products/services (sales employees) Never Physical work site required Yes Lifting: up to 10 pounds Constantly Lifting: 10 to 25 pounds Occasionally Lifting: 25 to 50 pounds Rarely _Disclaimer:_ _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._ _Compliance Requirement_ _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._ _As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy._ _Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._ Pay Range Minimum: $108,000.00 Pay Range Maximum: $201,800.00 _Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._ Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law. We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below. For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org California Consumer Privacy Act Employees, Contractors, and Applicants Notice Req ID: J267791

Information Security Officer Jobs in Juneau, AK

Similar Job Searches

Stand out to leading employers.

Information Security Officer Jobs in Juneau, AK

Engineer, Information Security Cardinal Health

Senior Risk Partner - Compliance Officer Highmark Health

Similar Job Searches