Director, Cyber Compliance (Information Security)

*What Information Security and Risk contributes to Cardinal Health*

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure or destruction.

The *Director, Cyber Compliance* is responsible for establishing, leading, and continuously the cybersecurity compliance program to ensure adherence to regulatory, legal, and internal policy requirements. Reporting to the Vice President, Global Cybersecurity Governance, Risk & Compliance (GRC), this role drives the design and execution of compliance frameworks, assessments, and processes to support secure and compliant business operations. Furthermore, this leader oversees regulatory compliance management, internal and external compliance assessments, privacy and SOX compliance, and specialized regulatory domains such as FDA GxP. The Director serves as a partner and advisor to cybersecurity, IT, legal, audit, and business teams to ensure compliance obligations are understood, operationalized, and continuously monitored in alignment with enterprise risk and governance strategies.

Location

- Fully remote, open to candidates based nationwide

Responsibilities

• Develop and lead a cybersecurity compliance program aligned with regulatory requirements, risk frameworks, and business objectives.
• Establish governance structures, processes, and accountability models to enable consistent execution of compliance activities across the organization.
• Serve as an advisor to cybersecurity and business leadership on regulatory requirements, compliance risks, and remediation priorities.
• Drive alignment between compliance initiatives and broader cybersecurity, risk, and governance strategies.
• Establish and maintain processes to ensure compliance with applicable cybersecurity regulations and standards (e.g., SOX, HIPAA, PCI, GDPR, CMMC).
• Monitor regulatory changes and emerging requireme