Senior Director, Identity Governance

Cencora•Carrollton, TX

About The Position

Owns the identity governance strategy, operating model, and control standards that keep enterprise access aligned to risk, audit, and regulatory obligations across a global healthcare enterprise. Leads the access certification, role lifecycle, and segregation-of-duties programs, and is accountable for control coverage, exception handling, and clear decision ownership. Directs the use of workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation by exposure. Owns the identity governance policy and standards library and the audit and SOX ITGC evidence that proves those controls operate. Establishes the governance forums and escalation paths that resolve policy exceptions, toxic access combinations, and role design conflicts. Partners with business, security, internal audit, and technology leaders to reconcile governance requirements with operational reality and transformation priorities, including M&A identity integration. Leads the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity. Builds and develops the team, setting priorities and capability to deliver consistently across the identity governance domain. This job profile description is a standardized, non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties, responsibilities, reporting lines, working conditions, grading, compensation, or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs, local requirements, and operational practices. Where a team member's role is governed by an employment agreement, local terms and conditions, prior job description or collective bargaining agreement, those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.

Requirements

Bachelor’s degree in information technology, cybersecurity, information systems, computer science, business administration, or a related field required.
12+ years of experience in identity and access management, cybersecurity, IT controls, or a related field required.
8+ years of experience in a management capacity required.

Nice To Haves

Master’s degree in information technology, cybersecurity, information systems, business administration, or a related field preferred.
Certification in CISSP, CISM, or identity and access management governance disciplines, or equivalent preferred.

Responsibilities

Owns the identity governance strategy, operating model, and control standards.
Leads the access certification, role lifecycle, and segregation-of-duties programs.
Accountable for control coverage, exception handling, and clear decision ownership.
Directs the use of workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation.
Owns the identity governance policy and standards library and the audit and SOX ITGC evidence.
Establishes the governance forums and escalation paths.
Partners with business, security, internal audit, and technology leaders.
Leads the evaluation and modernization of the identity governance platform, processes, and data quality.
Builds and develops the team, setting priorities and capability to deliver consistently.