Senior Third-Party Risk & Cybersecurity Analyst — Remote

McKesson Medical-Surgical Inc.; Cork; Hybrid; EUR 73,000 - 121,000; Full time

Job summary

McKesson is seeking a Sr. Information Security Analyst to strengthen third-party risk management. You will design and support risk practices, conduct advanced vendor assessments, and translate findings into actionable insights for business, technology, privacy, and compliance stakeholders.

This role offers hybrid work options in Ireland, with occasional travel. You will partner with procurement, legal, and business teams to ensure secure vendor relationships and governance.

Qualifications

• 7+ years in cybersecurity or risk management roles.
• Experience assessing vendor security and third-party controls.
• Experience with risk documentation and remediation recommendations.
• Familiarity with NIST, ISO 27001, SOC 2, HITRUST, CIS.

Responsibilities

• Design and govern third-party risk management processes and reporting.
• Lead advanced vendor security assessments and remediation validation.
• Evaluate vendor cybersecurity posture against frameworks and standards.
• Collaborate with procurement, legal, privacy, compliance, and tech teams.
• Develop continuous monitoring for critical vendors and risk dashboards.
• Translate risk findings into clear recommendations for technical and non-technical audiences.
• Support executive reporting and risk summaries for governance reviews.
• Mentor peers to standardize assessment practices.

Skills

Vendor risk management

Cyber risk assessments

Third-party risk management

Documentation and reporting

Cross-functional collaboration

Framework knowledge

Education

Bachelor’s degree or equivalent

Tools

GRC tools

Vendor risk management software

Job description

McKesson is seeking a Sr. Information Security Analyst to strengthen third-party risk management. You will design and support risk practices, conduct advanced vendor assessments, and translate findings into actionable insights for business, technology, privacy, and compliance stakeholders.

This role offers hybrid work options in Ireland, with occasional travel. You will partner with procurement, legal, and business teams to ensure secure vendor relationships and governance.