Job Description
What Cybersecurity Defense contributes to Cardinal Health Cybersecurity Defense focuses heavily on threat detection, incident response, and implementing security measures to protect our digital assets and infrastructure at Cardinal Health . The Director, Exposure Management is responsible for establishing, leading, and overseeing the exposure management program to proactively identify, prioritize, and reduce cybersecurity risk across network, cloud, endpoint, and data environments. This role drives the strategy and execution of vulnerability management, security configuration management, cloud and network security, endpoint security, and data protection capabilities. Moreover, this Director leads core aspects of exposure management, including vulnerability identification and prioritization, security configuration management, cloud and network security monitoring, endpoint and mobile security, data loss prevention (DLP), and data security posture management (DSPM). This person plays a critical role in reducing the organization’s attack surface, improving security posture, and enabling alignment with overarching cybersecurity & GTBS strategies. Location - Open to candidates nationwide working in a fully remote capacity, with preference towards those based in Central or Eastern time zones (willingness to travel into our Corporate HQ in Dublin, OH during certain period of the year is a plus) Responsibilities Develop and lead the exposure management strategy aligned with cybersecurity, risk management, and business objectives. Define governance frameworks and processes to identify, assess, prioritize, and remediate security exposures across the organization. Collaborate with cybersecurity leadership to align exposure management initiatives with broader cyber defense and risk reduction strategies. Serve as an advisor to leadership on exposure trends, risk posture, and mitigation priorities. Oversee enterprise vulnerability management capabilities, including identification