Cybersecurity Program & Portfolio Manager

Cardinal Health; United States; Remote; USD 125,000 - 197,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401k plan

Paid time off

Health Savings Account (HSA)

Wages access (myFlexPay)

FSAs

Disability coverage

Work-Life resources

Parental leave

Wellness programs

Job summary

Cardinal Health is seeking an Manager, CISO Program & Operations to oversee strategy, governance, and continuous improvement of the enterprise cybersecurity program. The role coordinates intake, portfolio management, budgeting, and reporting while ensuring alignment with organizational priorities and risk objectives.

The position emphasizes standardized processes, cross-functional collaboration, and data-driven insights to support decision-making and program maturity within a highly regulated

Qualifications

• 5+ years of experience in cybersecurity, technology risk, portfolio management, or program operations preferred.
• Bachelor’s Degree preferred
• Experience supporting cybersecurity project or portfolio management, including tracking initiatives, managing priorities, and reporting performance.
• Strong understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001), risk management principles, and regulatory requirements.
• Experience developing executive reporting materials and utilizing metrics to track program performance.
• Strong organizational, analytical, and problem-solving skills with attention to detail.
• Ability to manage multiple priorities and work effectively across cross-functional teams.
• Strong communication and stakeholder management skills.
• Experience in cybersecurity portfolio management, program governance, or strategy execution.
• Experience working in highly regulated industries (e.g., aviation, financial services, healthcare, or government).
• Familiarity with Agile methodologies and project management tools.
• Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field).
• Professional certifications such as CISSP, CISM, PMP, or PRINCE2.

Responsibilities

• Strategic facilitation & program oversight aligning activities to objectives.
• Collaborate with leadership to define goals, metrics, and monitor performance.
• Maintain cybersecurity services catalog across the program.
• Ensure processes stay aligned with strategic objectives and governance.
• Contribute to capability maturity assessments and continuous improvement.
• Coordinate cybersecurity project intake across stakeholders and resources.
• Support standardized project management frameworks, tools, and reporting.
• Provide visibility into project status and performance for leadership.
• Coordinate resource allocation and workload distribution across teams.
• Drive adherence to defined processes to ensure consistent delivery.
• Monitor KPIs/KRIs to assess program health and emerging risks.
• Develop executive, business unit, and operational reporting materials.
• Provide insights to inform prioritization, funding decisions, and strategic adjustments.
• Ensure consistency and accuracy in program reporting across teams.
• Track progress and escalate risks or issues as needed.
• Develop and manage program budget, aligning with objectives and forecasts.
• Collaborate with finance to support budgeting and reporting.
• Establish scalable financial governance for cybersecurity needs.
• Vendor management: maintain vendor inventory, evaluate performance, ensure alignment with contracts.
• Assist in vendor selection, RFPs, and coordination with procurement.
• Monitor vendor performance and issue resolution.
• Align engagements with architecture, security requirements, and priorities.
• Facilitate coordination across cybersecurity, IT, business units, and partners.
• Serve as liaison to ensure alignment and effective delivery of services.
• Support integration of cybersecurity into enterprise projects and audits.
• Promote transparency and collaboration across teams.
• Identify opportunities to improve processes, tools, and governance.
• Contribute to standardized documentation and operating procedures.
• Stay informed of cybersecurity trends, regulatory changes, and best practices.

Skills

Portfolio mgmt

Program governance

Executive reporting

Stakeholder mgmt

Agile

Regulatory knowledge

Risk management

Cross-functional work

Education

Bachelor's Degree

MBA/MS in Cybersecurity/IS

CISSP

CISM

PMP

PRINCE2

Job description

Cardinal Health is seeking an Manager, CISO Program & Operations to oversee strategy, governance, and continuous improvement of the enterprise cybersecurity program. The role coordinates intake, portfolio management, budgeting, and reporting while ensuring alignment with organizational priorities and risk objectives.

The position emphasizes standardized processes, cross-functional collaboration, and data-driven insights to support decision-making and program maturity within a highly regulated