Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

The Manager of Data Security is responsible for planning, executing, and managing multi-faceted projects related to information security. This key role will manage the Data Cybersecurity Engineering team, responsible for protecting Cencora’s most valuable data assets. This team designs and implements critical security measures, ensuring compliance, minimizing data breach risks, and enabling secure collaboration. They provide expertise and assistance to ensure the company’s infrastructure and information assets are protected. They work on security initiatives/issues for Information Security functional area of responsibility. They work directly with the customers, third parties and other internal departments and organizations to facilitate information security risk analysis and risk management processes and to identify acceptable levels of residual risk.

PRIMARY DUTIES AND RESPONSIBILITIES:

• Oversee and own the development, implementation, and management of enterprise Data Loss Prevention (DLP) capabilities.

• These capabilities include (but are not limited to): Data Loss Prevention (DLP), Data Discovery and Classification, Data Security Posture Management (DSPM), Cloud Access Security Broker (CASB), and Secure Web Gateway (SWG).

• Build strategic and tactical direction for data protection. These efforts include (but are not limited to): designing solutions, Policies & Procedures, Audits, Metrics, and Reporting. Work in collaboration with IT and Architecture teams to oversee security in projects.

• Implement DLP and data protection solutions across both on-premise and cloud environments, protecting both structured and unstructured data, and ensuring seamless integration and alignment with organizational goals.

• Implement Zero Trust principles by ensuring data-centric security policies are enforced across the organization.

• Collaborate on projects to ensure security issues are addressed throughout the project lifecycle. Inform stakeholders about compliance and security-related issues and activities affecting the assigned area or project.

• Interface with business and IT leaders to communicate security issues and respond to requests for assistance and information.

• Manage, develop, and mentor teams of Information Security professionals, as well as contractors, vendors, and service providers.

• Drive the tracking and resolution of Audit findings and remediation activities, and support external and customer security audits.

• Lead the development, implementation, and management of an enterprise Information Security & Privacy Training & Awareness Program to ensure the workforce is knowledgeable of policies, best practices, and relevant security and data privacy guidance appropriate to their roles.

• Develop and implement appropriate metrics and KPIs, and provide regular reporting on the maturity of the information security program, risk posture, risk management, and regulatory compliance of the company.

QUALIFICATIONS:

• Education: Bachelor’s or Master’s Degree in Information Security, Computer Science, Risk Analysis, Information Systems, Business Analytics, or other related fields, or equivalent work experience.

• Experience:

  • Typically requires ten (10) or more years of combined IT and security work experience with broad exposure to Data Protection functions.

  • Over five (5) years of experience designing and deploying security solutions at the enterprise level.

  • Hands-on experience with security tools, techniques, incidents, and solutions.

• Certifications:

  • Certified Information Systems Security Professional (CISSP)

  • Certified Information Security Manager (CISM)

  • Equivalent certifications related to CASB, DLP, or Zero Trust are preferred.

• Familiarity and Experience with Solutions:

  • Netskope

  • Palo Alto DLP

  • Microsoft Purview

  • Cyera

  • Proofpoint

  • Azure Security and Microsoft 365 Security

MINIMUM SKILLS, KNOWLED