McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.
Senior Information Security Analyst (Data & Visualization Services) supports cross-functional cybersecurity and technical teams in evaluating complex business requirements and designing solutions to meet those needs. Management of large projects or multiple related projects, serving as a liaison between McKesson Technology, Business Units and Vendors. Provides recommendations on process improvements and coordinate the implementation of new technologies.

Job Responsibilities:

• Supports overall delivery of security data product services, within the organization including automations, orchestrations, integrations of data; along with execution, reporting, visualization, remediation tracking and coordination across multiple geographies.
• Coordinate with various teams for service improvement, automation, innovative approaches to address security challenges.
• Work closely with risk owners and stakeholders to understand their security concerns and issues, help them develop action plans and follow up on progress.
• Identify opportunities to improve efficiency through automation and other means.
• Keep abreast of emerging security threats and technologies and provide guidance to stakeholders accordingly.
• Collaborate with other members of the information security team to integrate security processes into existing IT operations practices.
• Support the development and implementation of information security policies, standards, guidelines, and procedures.
• Ensure compliance with relevant laws, regulations, and industry standards regarding information security.

Basic / Required Qualifications:

• 7+ years of information technology experience
• 5+ years leading data product technologies
• Prior work experience in data lakes, data products, Azure Data Factory, Data Bricks (or equivalent)
• Deep understanding of security frameworks (NIST, ISO27K, PCI DSS, HIPAA, GDPR etc.)

Preferred Qualifications:

• Bachelor’s degree in computer science, information systems, or equivalent experience. Master’s in information systems, data science, highly preferred.
• Strong knowledge of cloud computing concepts, architecture, and security controls.
• Proven ability to lead, communicate, influence, and collaborate effectively at all levels of the organization.
• Experience managing security programs and implementing security solutions.
• Strong organizational skills, attention to detail, and problem-solving abilities.
• Ability to analyze data and present findings clearly and concisely.

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson’s pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

• Supports overall delivery of security data product services, within the organization including automations, orchestrations, integrations of data; along with execution, reporting, visualization, remediation tracking and coordination across multiple geographies.
• Coordinate with various teams for service improvement, automation, innovative approaches to address security challenges.
• Work closely with risk owners and stakeholders to understand their security concerns and issues, help them develop action plans and follow up on progress.
• Identify opportunities to improve efficiency through automation and other means.
• Keep abreast of emerging security threats and technologies and provide guidance to stakeholders accordingly.
• Collaborate with other members of the information security team to integrate security processes into existing IT operations practices.
• Support the development and implementation of information security policies, standards, guidelines, and procedures.
• Ensure compliance with relevant laws, regulations, and industry standards regarding information security