Total 5 Legal / Public / Security job vacancies in Nationwide

This role is for a Sr. Security Architect in our Information Security group focused on driving security strategy and improving the security posture of the organization.  The ideal candidate will possess a strong information security and project execution background. Accountabilities include:

• Drives development of enterprise security strategy aligned with NIST CSF1.1 with focus on People, Processes, and Technology
• Contributes to the creation of information security technology strategies and roadmaps based on business strategy, cybersecurity assessments, IT trends and the overall threat landscape.
• Contributes to the development of information security architectures that align with assessment remediation requirements, reference architectures, design patterns and technology standards
• Collaborates with Principal Architects to develop and document reference architectures and architectural patterns
• Collaborates with IT and Business partners to deliver security technology roadmaps
• Learns and masters innovative security technologies with focus on 1-3 year transformation of Cardinal Health
• Developes secure architectures that incorporate components from Identity and Access Management, DevSecOps, Networking, and Secrets ManagementProvides security architecture guidance on large-scale, complex projects
• Ensures project adherence to information security remediation efforts during solution build and implementation
• Participates in cybersecurity control assessments providing risk-based gap analysis and prioritized remediation recommendations
• Communicates the impact of cybersecurity gaps to diverse audiences
• Designs secure environments for cloud native services such as: Compute, Kubernetes, Container Registries, Databases, Pub/Sub, Infrastructure as Code, DevSecOps, CI/CD Pipelines, Cloud Consoles, Serverless Computing, APIs, and other applicable applications or services.
• Mentors and educates less experienced employees in the organization
• Designs security controls for emerging technologies (IoT, cloud technologies, automation, AI, etc.)

Qualifications

• Industry-specific certifications preferred, such as Security+, CISSP, AWS certifications, etc.
• Undergraduate degree in a technical field
• 7+ years of experience in Information Technology, with a preferred concentration on Information Security
• Advanced experience with information security principles, practices, technologies, programs and procedures, accompanied by an understanding of risk management methodologies
• Strategic thinker; translates strategy into actionable plan
• Strong technical design skills
• Excellent analytical, problem solving and decision making skills, applied with a solution-focused attitude
• Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism
• Team player
• Strong written and verbal communications skills
• Strong cloud technology experience is a plus (AWS, GCP, Azure)
• Strong understanding of IT domains and how solutions/applications are deployed and governed.
• Familiarity with information security standards and frameworks including ISO 27002, NIST, CIS Benchmarks, HIPAA, etc.

Anticipated salary range: $119,800 - $171,100

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/15/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

Cardinal Health Overview:

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for health care facilities.

We are a crucial link between the clinical and operational sides of care, working with more than 4,500 sourcing and manufacturing partners to deliver end-to-end solutions and data-driven insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care.

With 50 years of experience, approximately 44,000 employees and operations in more than 30 countries, Cardinal Health seizes the opportunity to address healthcare’s most complicated challenges — now, and in the future.

Department Overview:

Information Security and Risk Management (ISRM) at Cardinal Health enables Cardinal Health to securely deliver healthcare products and solutions that improve the lives of people every day by ensuring security and controls is embedded into Cardinal Health’s people, process and technology.

We currently have a career opening for a Sr. Engineer, Information Security and Risk, who will play an IT Privacy Compliance Program Run Lead role focused on driving IT Privacy Controls & Compliance for the organization.

Job Overview:

This role is a leader position within the team and requires having an in-depth understanding of local, national and international privacy and security regulations such as HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act) as well as relevant control frameworks to drive compliance to those regulatory requirements such as NIST, ISO, etc., while working with members of the Information Security and Risk Management team as well as privacy leaders in Legal, Ethics & Compliance and our various businesses throughout the Cardinal Health enterprise.  Senior Engineer will be responsible for managing operational activities (i.e., “Run”) of the IT Privacy Compliance Program, including confirming all assessments are completed, issue management and maintaining operational metrics. 

Daily Responsibilities:

• Leader over the “Run” activities of the IT Privacy Compliance Program as a Second Line of Defense (LOD) function.  Some of the key responsibilities include:
  • Create and manage calendar of IT Privacy Risk Assessments, while collaborating with appropriate risk functions to reduce redundancy of efforts, enhance reliance on Second LOD, and provide coverage across in-scope assets.
  • Lead management of all issues resulting from assessments to confirm appropriate stakeholder visibility and remediation recommendation, appropriate issue lead assignments, appropriate issue validation prior to closure, etc.
• Collaborate with IT Privacy Compliance Program Build Lead on driving overall success of the program.
• Build and implement metrics to report on effectiveness of the IT Privacy Compliance Program
• Partner with Legal counsel and Ethics & Compliance leaders to address regulatory or compliance requirements, issues, concerns or questions.
• Partner with IT and IT Security in the development of policies, procedures and practices in support of privacy and data protection compliance.
• Collaborate with IT and business leaders and team to provide guidance on doing privacy by design and remediating issues identified to enhance compliance to the regulatory requirements.
• Identify opportunities to automate various privacy and data protection compliance activities to reduce the overall cost of compliance.
• Mentor members of the team on how to effectively perform compliance assessments, complying to IT privacy regulation requirements, consultation on issue remediation recommendations and alternative solutions, etc.
• Effectively manage and implement change throughout the organization.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 10+ years’ experience in related field
• Prior experience with key IT Privacy regulation compliance including HIPAA and GDPR compliance.
• Prior experience with control frameworks (e.g., NIST, HITRUST, COBIT, COSO, and ISO) to drive IT Privacy regulatory compliance.
• Prior experience working with Internal or External Audit functions are a plus.
• Experience with IT risk and controls identification and assessments including IT control design and effectiveness testing.
• Experience with GRC (Governance, Risk and Compliance)
• Experience in analyzing data and creating reports/dashboards/views to provide visibility into risk and control landscape.
• Ideal candidate will have excellent communication skills (both verbal and written) with leaders at all levels within the organization, an ability to work in a matrixed environment to drive results, and the ability to clearly define and execute repeatable processes.
• Ideal candidate will have an effective time management, active listening, meeting facilitation, and influencing skills.
• Ability to effectively navigate a variety of challenging environments, prioritize work and determine when to escalate to upper management.
• Security or risk certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional) and/or CIPP (Certified Information Privacy Professional) certifications are a plus.

Anticipated salary range: $119,800 - $171,100

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner. We are a remote-first team and are excited to offer full-time remote opportunities. We currently have a full-time career opening for an Information Security and Risk Engineer role within the Information Security Organization. This role will report to the manager of IT control compliance council within our Information Security Team and will serve as the first line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT controls.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 4+ years’ experience in related field preferred, such as IT audit, IT compliance function
• Strong understanding and experience with SOX and/or other regulatory compliance processes
• Team Player and Collaborative – Ability to work well with team members to achieve the desired results
• Willing to independently navigate through complex scenarios and uncharted compliance topics
• Ability to multi-task with organization, efficiency, accountability, and attention to detail
• Driven and self-motivated to learn new technologies and achieve objectives
• A great & effective verbal and written communicator
• Professional certification preferred: CISA, CISSP, CISM, CRISC

Essential Duties and Responsibilities:

• Perform IT risk assessment for pilot areas and identify control gap
• Work with IT stakeholders to design effective IT controls and monitor the execution to manage risk and ensure compliance with regulations (e.g., SOX, HIPAA, GDPR)
• Design IT controls that increase operational efficiency and reduces the likelihood of control failure (e.g., automated and preventative controls vs. manual and detective)
• Challenge status quo - recommend new or improved controls to keep IT applications current with industry standards and compliance requirements.
• Carry out analysis on third party audit reports, such as SOC 1/2, to identify potential control issues.
• Track and drive remediation of IT control issues within our IT risk governance process Strong in educating/influencing of IT stakeholders to raise awareness and promote a mindset focused on IT controls and compliance
• Oversee information security compliance activities, including daily, weekly, quarterly and/or annual security risk assessments – both performing internal assessments and responding to external assessments.
• Collaborate cross-functionally within the information security and risk management department to ensure alignment with existing compliance, risk management and information security activities
• Research new security compliance requirements and assist in the evaluation of compliance control requirements.
• Any other duties that may be required as assigned

Experiences:

• Experience participating in external control audits; SOX and/or SOC1/2 Type II audit experiences are preferred
• Solid working knowledge of governance frameworks including NIST, ISO27000, FedRAMP
• Experience with Corrective Action Plans (CAP) to remediate deficiencies identified through monitoring, auditing, or a Compliance Issue Report (CIR). These activities should consist of improvements to health plan processes or vendor processes taken to eliminate causes of non-compliance or other issues
• Strong personality, ability, and credibility to influence key decision-makers, and highly technical resources.
• Strong Knowledge/experience of IT controls for mainstream ERPs, such as SAP, is a plus
• Strong in root cause analysis and problem solving
• Strong flowcharting skill is a plus
• Experience with IT risk governance software (i.e. Archer, AuditBoard, ServiceNow GRC) is a plus

Anticipated salary range: $92,100 - $131,600

Bonus eligible: No

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

Salary: £25,000 per annum with OTE of £60k when certificated

Location: Field Based - North, Northwest, Midlands, London, Southeast

Reporting to: Enforcement Manager

About CDER Group

Here at CDER Group we support and help clients recover money that is owed to them compassionately and compliantly.

We understand that everyone is different and with our unique approach to fairness we ensure that clients, customers, and employees are treated fairly, supporting our customers to repay any outstanding money owed.

As the largest technical debt collections and enforcement company in the UK, we are proud to work on behalf of clients such as Highways England, Transport for London, HMCTS, HMRC, DVLA and the Environment Agency.

Introduction

Realistic earnings of £60k once qualified, this position is a field-based role learning the necessary skills to become a Certificated Enforcement Agent.

If you are self-motivated, enjoy being part of a successful team and are committed to helping people, why not consider our award-winning Trainee Enforcement Programme. Lasting for approximately 10-12 weeks, you will be paid a salary throughout the training period. Successful completion of the course results in a level 2 equivalent qualification in Taking Control of Goods and a guaranteed self-employed or employed contract with CDER Group.

Established in 2004, CDER group is a trusted partner to UK Government and a market leading innovator in the recovery of unpaid taxes, fines, commercial debt and magistrates warrants.

No experience is needed as all training will be supplied.

Full driving license and access to a vehicle is essential during your training period. Vehicle hire is available once you have successfully completed training.

What's in it for you?

Gym membership contribution: we will give you up to £20 per month towards your gym membership
Company pension
24/7 employee assistance programme
Company sick pay
Referral programme
Discounts and savings available on our bespoke staff rewards platform
25 days holiday, rising to 28
Voluntary service opportunities to a charity of your choice – up to two days per year
Long service awards
Enhanced family leave
Mobile, Body worn video

Responsibilities

Adhere to Enforcement industry legislation, particularly the Laws Tribunals Courts & Enforcement Act 2007 and Taking Control of Goods, Commercial Rent Arrears Recovery, The Certification of Enforcement Agents Regulations 2014
Meet with an Enforcement Agent mentor in a timely fashion when undertaking “work shadowing” activities
Attend addresses, alongside a certificated Enforcement Agent and observe Taking Control of Goods if payment is not made
Ability to negotiate payment arrangements which complies with client and company guidelines
Upload notes, photos and fees from each visit to the case management system correctly
Be confident and self-motivated with the ability to achieve targets
Act in a professional manner at all times
Identify vulnerable groups and work within the company’s vulnerable group and safe-guarding policies
Adhere to company compliance and data protection throughout every visit

Personal qualities, experience and skills

Good verbal communication
Excellent negotiation skills
Ability to work under pressure
Manage conflict and deal with vulnerable members of the public
We offer opportunities to become a Self Employed or Employed member of our Team upon passing the Training Programme, this will be discussed on application.

CDER Group are proud to be an Equal Opportunities Employer. We celebrate diversity and equal opportunities and are committed to creating an inclusive environment for all employees that represents a variety of backgrounds, perspectives and skills.

If you require any assistance or accommodation due to disability, please contact the HR Department.

Salary: £20,000 – £26,000 dependent on experience (realistic OTE 60k)

Location: Field Based – London, Midlands, Southeast, Northwest, Liverpool

Reporting to: Enforcement Manager

About CDER Group

Here at CDER Group we support and help clients recover money that is owed to them compassionately and compliantly.

We understand that everyone is different and with our unique approach to fairness we ensure that clients, customers, and employees are treated fairly, supporting our customers to repay any outstanding money owed.

As the largest technical debt collections and enforcement company in the UK, we are proud to work on behalf of clients such as Highways England, Transport for London, HMCTS, HMRC, DVLA and the Environment Agency.

Introduction

CDER is looking for enthusiastic, experienced individuals to join our enforcement team.

Our certificated Enforcement Agents enforce warrants and liability orders for various local authorities and commercial clients. The certificated Enforcement Agent’s role is to take control of goods to cover the amount a debtor owes.

The role reports to an Enforcement Manager and is based in the field.

If you are an existing Certificated Enforcement Agent, we will start issuing you work as soon as you have completed your CDER induction. In addition to generous commission rates, we will also pay you an additional commission payment for confirming that debtors have gone away (GANT). We are the only enforcement company in the industry to offer this reward. We will also provide you with continuous support, training and development throughout your career with CDER Group.

What's in it for you?

Gym membership contribution: we will give you up to £20 per month towards your gym membership
Company pension
24/7 employee assistance programme
Company sick pay
Referral programme
Discounts and savings available on our bespoke staff rewards platform
25 days holiday, rising to 28
Voluntary service opportunities to a charity of your choice – up to two days per year
Long service awards
Enhanced family leave
Working hours that are flexible
Extra holiday days available to buy, up to five days per year

Responsibilities

Attend addresses and remove goods if payment is not made following company procedures and completing necessary documentation at all times or, discuss a suitable arrangement which complies with client and company guidelines
Identify if a debtor is in a vulnerable category and if so make an appropriate payment arrangement and/or signpost to further support channels
Complete case reports upon request, using company standard reports
Add notes, photos and fees from each visit to the case management system correctly
Comply with company and client policies and procedures
Adhere to National Standards
Ensure all company equipment including vehicles are maintained and report accidents, equipment problems etc according to company procedures
Use Body Worn Video (BWV) and download footage daily via WIFI
Participate in training and development as and when required

Personal qualities, experience and skills

Certificated Enforcement Agent by a county court
Confident, self-motivated, trustworthy and organised
Competent computer skills
Good judge of character
Being physically able to lift and remove goods
Have an excellent knowledge of Enforcement Agent regulations
Be able to work under pressure
Excellent communication and negotiation skills
Excellent people skills
Excellent conflict management and conflict resolution skills
Be able to work alone or as part of a small team
CDER Group are proud to be an Equal Opportunities Employer. We celebrate diversity and equal opportunities and are committed to creating an inclusive environment for all employees that represents a variety of backgrounds, perspectives and skills.

If you require any assistance or accommodation due to a disability, please contact the HR department.