Cloud Security Director — Strategy & Governance (Multi-Cloud)

Cencora; Phoenix (AZ); On-site; USD 142,000 - 283,000; Full time

Job summary

Cencora seeks a Senior Director of Cloud Security to lead global strategy, architecture, engineering, and governance of cloud security across multi-cloud and hybrid environments. This role secures IaaS/PaaS, SaaS, containers, and cloud-native apps while enabling business velocity and regulatory compliance.

Partner with CISO and Tech leaders to ensure scalable, measurable defense capabilities, drive DevSecOps integration, and build a high-performing global cloud security team.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information security, information systems, or related field, or equivalent experience required.
• Master's degree in cybersecurity, computer science, information security, information systems, or related field, or equivalent experience preferred.

Responsibilities

• Define and execute the enterprise cloud security strategy aligned to risk appetite and regulatory requirements.
• Establish cloud security reference architectures, guardrails, and design patterns.
• Lead cloud security governance across AWS, Azure, GCP, and SaaS providers.
• Own cloud security policy framework and control standards (aligned to NIST, ISO 27001, SOC 2, HIPAA).
• Establish secure-by-design and DevSecOps integration models.

Skills

Cloud security leadership

Strategic planning

Governance & compliance

Stakeholder communication

Zero trust / IAM

Cloud-native security

DevSecOps collaboration

Multi-cloud expertise

Education

Bachelor's degree in cybersecurity, CS, or related field

Master's degree preferred

Tools

CSPM

CWPP

CNAPP

DSPM

SIEM

Job description

Cencora seeks a Senior Director of Cloud Security to lead global strategy, architecture, engineering, and governance of cloud security across multi-cloud and hybrid environments. This role secures IaaS/PaaS, SaaS, containers, and cloud-native apps while enabling business velocity and regulatory compliance.

Partner with CISO and Tech leaders to ensure scalable, measurable defense capabilities, drive DevSecOps integration, and build a high-performing global cloud security team.