Owns the identity governance strategy, operating model, and control standards that keep enterprise access aligned to risk, audit, and regulatory obligations across a global healthcare enterprise. Leads the access certification, role lifecycle, and segregation-of-duties programs, and is accountable for control coverage, exception handling, and clear decision ownership. Directs the use of workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation by exposure. Owns the identity governance policy and standards library and the audit and SOX ITGC evidence that proves those controls operate. Establishes the governance forums and escalation paths that resolve policy exceptions, toxic access combinations, and role design conflicts. Partners with business, security, internal audit, and technology leaders to reconcile governance requirements with operational reality and transformation priorities, including M&A identity integration. Leads the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity. Builds and develops the team, setting priorities and capability to deliver consistently across the identity governance domain.

This job profile description is a standardized, non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties, responsibilities, reporting lines, working conditions, grading, compensation, or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs, local requirements, and operational practices. Where a team member's role is governed by an employment agreement, local terms and conditions, prior job description or collective bargaining agreement, those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.

• Bachelor’s degree in information technology, cybersecurity, information systems, computer science, business administration, or a related field required.
• Master’s degree in information technology, cybersecurity, information systems, business administration, or a related field preferred.
• 12+ years of experience in identity and access management, cybersecurity, IT controls, or a related field required.
• 8+ years of experience in a management capacity required.
• Certification in CISSP, CISM, or identity and access management governance disciplines, or equivalent preferred.

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit