Remote Director, Cyber Risk & GRC Strategy

Cardinal Health; Northern (KY); Hybrid; USD 137,000 - 232,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

401k savings plan

Health savings account (HSA)

Paid time off plan

Flexible spending accounts (FSAs)

Work-Life resources

Paid parental leave

myFlexPay

Job summary

Cardinal Health seeks a Director, Cyber Risk Services to design and lead the cybersecurity risk management program, aligning with enterprise risk management and regulatory requirements. You will partner with the GRC leadership to define priorities, drive governance, and elevate risk visibility across the organization.

The role requires deep expertise in cyber risk frameworks, risk remediation, and third-party risk management, with responsibility for executive-level reporting and cross-functional

Qualifications

• 8+ years in cybersecurity, risk management, or information security.
• Strong expertise in cyber risk frameworks and ERM integration.
• Experience leading risk assessment, remediation, and third-party risk management.
• Strong understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001) and regulatory requirements.
• Experience developing executive-level reporting and communicating risk insights to senior leadership.

Responsibilities

• Develop and lead cybersecurity risk management strategy aligned with enterprise risk management frameworks, business objectives, and regulatory expectations.
• Collaborate with the VP of Global Cyber GRC and enterprise stakeholders to define risk management priorities, methodologies, and governance structures.
• Establish governance processes, roles, and accountability models to ensure consistent execution of cyber risk activities across the organization.
• Serve as an advisor to leadership on cybersecurity risk posture, emerging threats, and mitigation strategies.
• Define, standardize, and maintain cybersecurity risk management frameworks, methodologies, and taxonomies across the CISO Program.
• Ensure consistency in risk identification, assessment, scoring, and reporting across cybersecurity and business segments.

Skills

Cyber risk governance

Risk management frameworks

Executive reporting

Leadership

Stakeholder management

Tools

GRC platforms

Job description

Cardinal Health seeks a Director, Cyber Risk Services to design and lead the cybersecurity risk management program, aligning with enterprise risk management and regulatory requirements. You will partner with the GRC leadership to define priorities, drive governance, and elevate risk visibility across the organization.

The role requires deep expertise in cyber risk frameworks, risk remediation, and third-party risk management, with responsibility for executive-level reporting and cross-functional