Security Architecture Director: Strategy & Governance

Cardinal Health; Richmond (VA); On-site; USD 154,000 - 261,000; Full time

Benefits offered by this job

Medical, dental and vision

Paid time off

401k plan

HSA

FSAs

Parental leave

Work-Life resources

Job summary

Cardinal Health seeks a Director of Security Architecture to lead the strategy, standards, and design practices for secure, scalable technology solutions. You will guide architecture governance, embed security into the development lifecycle, and drive risk-informed decisions across the enterprise.

The role emphasizes collaboration with executives, engineering, and risk teams to align security with business priorities while overseeing architecture reviews and tooling optimization.

Qualifications

• 10+ years of experience in cybersecurity, security architecture, or information security, with focus on enterprise architecture and solution design preferred.
• Deep expertise in security architecture frameworks, secure design principles, and enterprise technology environments.
• Strong understanding of cybersecurity frameworks (NIST CSF, ISO 27001) and regulatory requirements.
• Experience leading architecture reviews, defining standards, and guiding secure solution development.
• Experience in leadership roles overseeing security architecture or engineering teams.

Responsibilities

• Develop and lead the enterprise security architecture strategy aligned with cybersecurity, risk management, and business objectives.
• Establish governance frameworks and processes to guide secure design, technology selection, and solution deployment across the organization.
• Collaborate with cybersecurity leadership, enterprise architecture, and technology teams to define target-state architecture and long‑term roadmap.
• Provide proactive security guidance and risk‑informed recommendations during solution design and development.
• Partner with application, engineering, and commercial technology teams to embed security requirements early in the development lifecycle.
• Oversee architecture review processes to evaluate solutions against security standards and risk requirements.
• Drive consistency and quality in architecture review practices across teams.
• Support security‑by‑design reviews, pre‑implementation assessments, and architecture decision‑making for new initiatives and technologies.
• Act as a technical liaison to translate security requirements and risks for both technical and non‑technical stakeholders.
• Assess, rationalize, and optimize the cybersecurity tooling landscape to reduce complexity and improve coverage.

Skills

Security architecture

Leadership

Governance

Risk management

Cloud security

DevSecOps

Stakeholder management

Architecture reviews

Enterprise architecture

Regulatory frameworks

Education

Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field) preferred

Job description

Cardinal Health seeks a Director of Security Architecture to lead the strategy, standards, and design practices for secure, scalable technology solutions. You will guide architecture governance, embed security into the development lifecycle, and drive risk-informed decisions across the enterprise.

The role emphasizes collaboration with executives, engineering, and risk teams to align security with business priorities while overseeing architecture reviews and tooling optimization.