Cybersecurity Risk Operations Lead – (Enterprise Applications)

McKesson’s Corporate; Cork; On-site; EUR 62,000 - 103,000; Full time

Job summary

McKesson seeks a Cybersecurity Leader to rapidly assess the current landscape, identify gaps, and implement repeatable processes that reduce risk across the Enterprise Applications portfolio. The role partners with the BISO and technology teams to drive scalable security improvements and governance across a complex landscape.

The successful candidate will establish visibility into risks within 90 days, improve remediation accountability, and accelerate vulnerability remediation while maturing

Qualifications

• Bachelor's degree in IT, cybersecurity, engineering, business, or related field.
• 10+ years of progressive leadership experience in cybersecurity, technology risk management, or enterprise app environments.
• Experience managing cybersecurity programs across multinational organizations.
• Proven ability to establish cybersecurity governance, vulnerability management, and remediation processes.

Responsibilities

• Lead cybersecurity operations, vulnerability management, and risk reduction across Enterprise Applications.
• Establish and mature standardized processes for vulnerability assessment, remediation tracking, risk acceptance, and governance.
• Analyze security trends and implement corrective actions to reduce organizational risk.
• Coordinate with cross-functional teams to prioritize and remediate critical vulnerabilities.
• Develop action plans to address findings with accountability and timely execution.
• Prioritize cybersecurity investments and funding across portfolios and teams.
• Implement dashboards and executive reporting to monitor security posture and progress.
• Drive automation of cybersecurity response, reporting, and governance processes.

Skills

Analytical skills

Communication

Stakeholder management

Leadership

Self-starter

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or related field

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

About the Role

About the Role The successful candidate will quickly assess the current cybersecurity landscape, identify operational and governance gaps, and implement disciplined, repeatable processes that drive measurable risk reduction. Within the first 90 days, this leader is expected to establish clear visibility into cybersecurity risks, improve remediation accountability, accelerate resolution of critical and high‑risk vulnerabilities, strengthen patch governance, and create sustainable action plans that materially improve the security posture of the Enterprise Applications portfolio. McKesson Technology is seeking a results-oriented Cybersecurity Leader to drive cybersecurity risk reduction across the Enterprise Applications portfolio. This role is responsible for establishing scalable cybersecurity processes, accelerating vulnerability remediation, improving cyber governance, and partnering with our BISO and technology teams to proactively manage risk across a complex application landscape. The ideal candidate is a self-starter with a proven ability to build processes from the ground up, rapidly assess gaps, and implement sustainable solutions that deliver measurable security improvements.

Key Responsibilities

• Partner with BISO to lead cybersecurity operations, vulnerability management, and risk reduction initiatives across the Enterprise Applications portfolio.
• Establish and mature standardized processes for vulnerability assessment, remediation tracking, risk acceptance, exception management, and cybersecurity governance.
• Analyze security trends, identify systemic issues, and implement corrective actions to reduce organizational risk.
• Partner with application, engineering, infrastructure, architecture, and cyber teams to prioritize and remediate critical and high‑risk vulnerabilities.
• Develop and drive action plans to address security findings, ensuring accountability and timely execution.
• Coordinate with portfolio, product, and finance teams to prioritize cybersecurity investments, projects, and funding requirements.
• Implement metrics, dashboards, and executive reporting to monitor security posture, remediation progress, and operational effectiveness.
• Drive automation of cybersecurity response, reporting, and governance processes wherever practical.
• Lead long-term risk mitigation strategies for vulnerabilities that cannot be resolved through standard patching activities.
• Foster a culture of security ownership, operational excellence, and continuous improvement across technology teams.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or related field.
• 10+ years of progressive leadership experience in cybersecurity, technology risk management, technology operations, or enterprise application environments.
• Experience managing cybersecurity programs across large-scale technology portfolios within multinational organizations.
• Demonstrated success establishing cybersecurity governance, vulnerability management, and remediation processes.
• Proven ability to assess complex environments, identify gaps, solve problems quickly, and implement repeatable operational processes.
• Strong analytical, communication, stakeholder management, and leadership skills.
• Self-starter with a strong bias for action and accountability.

Preferred Qualifications

• MBA, CISSP, CISM, CRISC, Lean Six Sigma Black Belt, or similar professional certifications.
• Fortune 500, blue‑chip, or large multinational company experience.
• Experience automating cybersecurity workflows, reporting, and response processes.
• Strong knowledge of vulnerability management, cyber risk management, patch management, security operations, and governance frameworks.
• Experience partnering with software development and application teams to integrate security into delivery processes.
• Working knowledge of Lean principles, continuous improvement methodologies, and operational excellence practices.

Total Rewards

At McKesson, we care about the well‑being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well‑being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

Our Base Pay Range for this position €61,500 - €102,500