VP - Cybersecurity Governance, Risk & Compliance

Cardinal Health

Actively hiring Posted this week Verified listing
Us-Nationwide-Field, US Posted 2 days ago $176,400$298,320 / year

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $168k
This role $237k
$103k most similar roles pay here $319k

This role pays more than 88% of similar roles. Most pay $142,400–$194,000 — the shaded band above. At the midpoint, this role pays about $237k versus about $168k for comparable roles.

Based on 239 similar postings.

Employer

About Cardinal Health

Cardinal Health is a global healthcare services and products company specializing in pharmaceutical distribution, medical products, and supply chain solutions for healthcare providers and pharmacies. Industry: Healthcare Distribution & Services

Cardinal Health currently has 38 open roles on FindRole.

Listed pay typically runs $123,400–$170,705 across 38 roles with salary data.

Most-posted roles

View all roles at Cardinal Health

At a glance

TL;DR

The Vice President of Cybersecurity Governance, Risk & Compliance is a senior executive role within Cardinal Health’s Information Security and Risk team, responsible for establishing and leading the enterprise-wide cybersecurity governance strategy. This individual will ensure that cybersecurity risks are effectively managed and communicated in alignment with business objectives and regulatory requirements. Key responsibilities include supporting the CISO in operating a robust cybersecurity governance program, advising on risk posture and compliance readiness, and overseeing cyber policy, standards, and controls. The role also involves managing third-party risk oversight, driving resilience strategies, and fostering a culture of security awareness. Ideal candidates have over 12 years of experience in cybersecurity leadership roles, with expertise in regulatory compliance, enterprise risk management, and GRC platforms such as NIST CSF and ISO 27001. This position requires strong leadership skills and the ability to influence senior executives and boards across highly regulated industries.

What you'll do

  • Develop and enforce cybersecurity policies aligned with regulatory requirements and enterprise objectives.
  • Oversee cyber risk assessments and establish GRC platforms for tracking risks and remediation activities.
  • Ensure compliance with regulations like SOX, HIPAA, PCI, and SOC 2 through internal and external audits.
  • Manage third-party risk by conducting assessments, onboarding processes, and contract reviews.
  • Lead the development of disaster recovery plans and conduct testing to validate recovery strategies.
  • Establish cybersecurity metrics and reporting frameworks for executive leadership and board insights.

What we're looking for

  • Over 12 years of experience in cybersecurity leadership roles
  • Expertise in cybersecurity governance, risk management frameworks, and regulatory compliance
  • Proven track record developing and leading enterprise-wide GRC programs
  • Strong understanding of cybersecurity frameworks (e.g., NIST CSF, ISO 27001)
  • Experience presenting to executive leadership, audit committees, and board members
  • Leadership in highly regulated industries such as healthcare or financial services
  • Professional certifications like CISSP, CISM, CRISC, or similar

More like this

Similar roles

Cybersecurity Director

Marathon Petroleum

San Antonio, TX 13 days ago
SIEM SOAR EASM CI/CD Kubernetes AWS Azure GCP Python SQL PostgreSQL Cyber Threat Intelligence Vulnerability Management IT Governance Compliance Reporting Digital Awareness Data-Driven Decision Making Influencing Others

Cybersecurity Strategy and Communications Lead

3M

Maplewood, MN 27 days ago $164,612$201,193
PowerPoint Microsoft Office Suite SharePoint Online Adobe Creative Suite Project Management Tools Cybersecurity Platforms CI/CD Cloud Services Databases Python JavaScript HTML CSS Web Content Management Systems Digital Design Software Collaboration Tools Terraform AWS Kubernetes