This role pays less than
51%
of similar roles. Most pay
$156,600–$226,350
— the shaded band above.
At the midpoint, this role pays about
$185k
versus about
$191k
for comparable roles.
Based on 239 similar postings.
Employer
About Cardinal Health
Cardinal Health is a global healthcare services and products company specializing in pharmaceutical distribution, medical products, and supply chain solutions for healthcare providers and pharmacies. Industry: Healthcare Distribution & Services
Cardinal Health currently has
36 open roles
on FindRole.
Listed pay typically runs
$94,900–$135,600
across 32 roles with salary data.
The Director, Cyber Compliance (Information Security) joins the Information Security and Risk team to establish, lead, and continuously manage the cybersecurity compliance program. This leader is responsible for designing and executing compliance frameworks, overseeing regulatory audits, and managing internal and external assessments. The role involves ensuring adherence to various standards including SOX, HIPAA, PCI, GDPR, CMMC, and specialized domains like FDA GxP. Day-to-day responsibilities include developing assessment programs, identifying compliance gaps, monitoring risk indicators, and providing expert guidance to IT, legal, and business teams. The candidate will utilize expertise in NIST CSF and ISO 27001 frameworks to protect technology assets from unauthorized modification or disclosure. This position solves the critical challenge of aligning complex regulatory requirements with internal security policies to ensure secure operations within a highly regulated healthcare environment.
Develop and lead a cybersecurity compliance program aligned with regulatory requirements, risk frameworks, and business objectives.
Establish governance structures, processes, and accountability models to ensure consistent execution of compliance activities across the organization.
Manage compliance for specific regulations including SOX, HIPAA, PCI, GDPR, and FDA GxP.
Oversee internal and external audits, providing necessary documentation, evidence, and subject matter expertise.
Identify compliance gaps and partner with stakeholders to develop and execute remediation plans.
Monitor regulatory changes and emerging requirements to proactively update compliance programs and controls.
Build and lead a high-performing cybersecurity compliance team through coaching, training, and career development.
Report compliance metrics, audit outcomes, and remediation progress to executive leadership.
What we're looking for
Ideally targeting individuals with 8+ years of experience in cybersecurity compliance, risk management, or information security.
Strong expertise in cybersecurity compliance frameworks, regulatory requirements, and audit processes.
Experience leading compliance programs, including internal and external assessments, audit management, and remediation efforts.
Strong understanding of cybersecurity frameworks such as NIST CSF and ISO 27001.
Knowledge of regulatory requirements including SOX, HIPAA, GDPR, and PCI.
Demonstrated ability to collaborate with cross-functional teams and influence stakeholders across the organization.
Experience in a people leader role overseeing cybersecurity compliance or GRC functions (preferred).
Experience in highly regulated industries, professional certifications (CISSP, CISM, CRISC, CISA), or specialized domains like FDA GxP or CMMC (preferred).