Job Description
The Manager, Information Security & Risk (Purple Team) leads the organization's adversarial testing, attack simulation, and detection validation capabilities. This role sits at the intersection of offensive and defensive security, partnering closely with Incident Response, Threat Intelligence, Detection Engineering, Platform Engineering, and Application Security to continuously validate and strengthen Cardinal Health's cyber defenses. This leader is accountable for building and operating a highly effective Purple Team while guiding the organization through a transformational evolution toward automation-first, detection-as-code, and emerging agentic security capabilities. The role requires deep technical credibility, strong people leadership, and the ability to translate complex security outcomes into actionable improvements aligned to business risk Responsibilities Technical & Strategic Leadership Lead Purple Team operations across adversarial emulation, penetration testing, detection validation, and control assurance, ensuring activities reflect real-world threat actor behavior and enterprise risk priorities. Define and evolve the Purple Team strategy and roadmap, including scope, cadence, and success metrics for adversarial exercises and detection testing. Drive the transition toward detection-as-code, automated validation, and agentic security workflows in partnership with SOC and platform teams. Provide hands-on technical guidance across attack simulation frameworks, detection pipelines, logging validation, and telemetry quality. Ensure Purple Team findings lead to measurable improvements in detections, response playbooks, logging coverage, and platform resilience. People Leadership & Team Development Recruit, develop, and lead a diverse and inclusive Purple Team wi