Director of Information Security Strategy — Worthington

About Cardinal Health Information Security and Risk

Cardinal Health's Information Technology function anticipates, plans, and delivers strategies that enable operations and drive business value. Within this framework, Information Security and Risk is dedicated to protecting the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. The team develops system back-up and disaster recovery plans, conducts incident response, manages threats and vulnerabilities, and performs comprehensive risk assessments.

About the Role

The Director, CISO Strategy & Transformation Office serves as a senior leader and central integration point across cybersecurity, technology, and business teams. Reporting to the SVP and Chief Information Security Officer (CISO), this role is responsible for establishing, executing, and continuously monitoring the global cybersecurity and infrastructure program strategy. The position aligns cybersecurity priorities with enterprise objectives and risk management outcomes.

In this capacity, you will lead the design and execution of the CISO strategy, overseeing portfolio management, financial governance, vendor management, and program performance. A critical component of the role involves setting cybersecurity mergers and acquisitions (M&A) strategy, coordinating the integration of security capabilities, processes, and technologies across the deal lifecycle. You will drive operational excellence through structured intake and prioritization, promoting a data-driven, risk-based approach to decision-making that supports executive leadership and business stakeholders.

Hiring Process

Candidates interested in this opportunity are encouraged to submit their application as soon as possible, as the application window is anticipated to close on June 12, 2026.

Our Culture and Commitment to Diversity

Cardinal Health supports an inclusive workplace that values diversity of thought, experience, and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. We encourage candidates who are back-to-work, people with disabilities, those without a college degree, and Veterans to apply.

Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status, or any other status protected by federal, state, or local law.

Work location

Work model: On-site

6817, Hayhurst Street, Worthington Estates, Worthington, Sharon Township, Franklin County, Ohio, 43085, United States

Worthington, Ohio

Key Responsibilities

check_circleLead the management of the CISO program portfolio including prioritization, planning, and execution of initiatives
check_circleMonitor and report on program performance using KPIs and KRIs to support executive decision-making
check_circleOversee financial planning, budgeting, forecasting, and resource alignment for the CISO program
check_circleLead cybersecurity integration planning and due diligence activities across the M&A lifecycle
check_circleCoordinate engagement requests across business units, technology teams, auditors, and external partners
check_circleBuild and lead a high-performing team through coaching, career development, and role-based training
check_circleDevelop and socialize the global cybersecurity strategy and multi-year roadmap aligned with enterprise goals
check_circleManage the vendor portfolio including inventory, performance tracking, and contract lifecycle management

Requirements

verified8+ years of progressive experience in cybersecurity, technology risk, or IT program leadership
verifiedAdvanced degree (MBA, MS in Cybersecurity, Information Systems, or related field) preferred
verifiedProfessional certifications such as CISSP, CISM, CRISC, or PMP
verifiedExperience with Agile methodologies and enterprise portfolio management tools

Nice to Have

8+ years of progressive experience in cybersecurity, technology risk, or IT program leadership with a focus on strategy, portfolio management, or program operations. Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field). Professional certifications such as CISSP, CISM, CRISC, or PMP. Experience with Agile methodologies and enterprise portfolio management tools.

Benefits & Perks

check_circleMedical, dental and vision coveragecheck_circlePaid time off plancheck_circleHealth savings account (HSA)check_circle401k savings planAccess to wages before pay day with myFlexPay

Skills, education and keywords

Skills: Nist CSF, Iso 27001, Cissp, Cism, Crisc, PMP, Agile Methodologies, Enterprise Portfolio Management Tools.

Education: Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field) preferred.

Frequently asked questions about Director, CISO Strategy & Transformation Office at Cardinal Health

What does a Director, CISO Strategy & Transformation Office at Cardinal Health do?expand_more

In this Director, CISO Strategy & Transformation Office at Cardinal Health role, you will lead the management of the ciso program portfolio including prioritization, planning, and execution of initiatives; monitor and report on program performance using kpis and kris to support executive decision-making; oversee financial planning, budgeting, forecasting, and resource alignment for the ciso program; and lead cybersecurity integration planning and due diligence activities across the m&a lifecycle.

What are the requirements for this Director, CISO Strategy & Transformation Office role?expand_more

To qualify for the Director, CISO Strategy & Transformation Office at Cardinal Health position, applicants should have: 8+ years of progressive experience in cybersecurity, technology risk, or IT program leadership; Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field) preferred; Professional certifications such as CISSP, CISM, CRISC, or PMP; and Experience with Agile methodologies and enterprise portfolio management tools.

Where is the Director, CISO Strategy & Transformation Office role at Cardinal Health located?expand_more

Director, CISO Strategy & Transformation Office at Cardinal Health is based in 6817, Hayhurst Street, Worthington Estates, Worthington, Sharon Township, Franklin County, Ohio, 43085, United States. This is a on-site role.

Is this Director, CISO Strategy & Transformation Office job remote, hybrid, or on-site?expand_more

Cardinal Health has listed this Director, CISO Strategy & Transformation Office role as on-site.

How much experience is required for this Director, CISO Strategy & Transformation Office role?expand_more

Director, CISO Strategy & Transformation Office at Cardinal Health typically requires 8+ years of relevant experience at the executive level.

What skills do you need for the Director, CISO Strategy & Transformation Office role at Cardinal Health?expand_more

Key skills for Director, CISO Strategy & Transformation Office at Cardinal Health include Nist CSF; Iso 27001; Cissp; Cism; Crisc; PMP; Agile Methodologies; and Enterprise Portfolio Management Tools.

What education is required for Director, CISO Strategy & Transformation Office at Cardinal Health?expand_more

Educational requirements for this role: Advanced degree (MBA, MS in Cybersecurity, Information Systems, or related field) preferred.

What category does the Director, CISO Strategy & Transformation Office role belong to?expand_more

Director, CISO Strategy & Transformation Office at Cardinal Health is part of the it job category on Recrutus.

Director, CISO Strategy & Transformation Office