Head of Security Architecture & Strategy

Cardinal Health; Frankfort (KY); On-site; USD 154,000 - 261,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off

Health savings account

401k savings plan

MyFlexPay access

FSAs

Disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Job summary

Cardinal Health seeks a Director of Security Architecture to lead the security architecture strategy, standards, and design practices that enable secure, scalable technology solutions across the organization.

Reporting to the Vice President, Information Security & Risk, this role will guide architecture reviews, embed security into the development lifecycle, and collaborate with engineering and risk teams to ensure security requirements align with business priorities and risk posture.

Qualifications

• 10+ years of experience in cybersecurity, information security, with focus on enterprise architecture.
• Experience leading security architecture strategy and governance.
• Strong understanding of NIST, ISO frameworks and regulatory requirements.
• Proven ability to align security with business priorities and risk management.
• Leadership in multi-disciplinary teams and programs.

Responsibilities

• Lead enterprise security architecture strategy and roadmap aligned with cybersecurity, risk management, and business objectives.
• Develop, maintain, and enforce enterprise security architecture standards, principles, and guidelines.
• Oversee architecture review processes and risk assessments prior to implementation.
• Provide proactive security advisory across development, design, and engineering teams.
• Drive tooling strategy, optimization, and integration across security programs.
• Mentor and develop security architecture capabilities across teams.

Job description

Cardinal Health seeks a Director of Security Architecture to lead the security architecture strategy, standards, and design practices that enable secure, scalable technology solutions across the organization.

Reporting to the Vice President, Information Security & Risk, this role will guide architecture reviews, embed security into the development lifecycle, and collaborate with engineering and risk teams to ensure security requirements align with business priorities and risk posture.