Senior Vendor Cyber Risk & Governance Analyst

Mckesson Corporation; Cork; Hybride; EUR 73 000 - 121 000; Plein temps

Avantages offerts par ce poste

Total Rewards package

Competitive compensation

Résumé du poste

McKesson Corporation seeks a Sr. Information Security Analyst to strengthen third-party risk management across our vendor ecosystem. You will design assessments, translate findings for stakeholders, and help shape governance in a regulated, enterprise-scale environment.

You’ll collaborate with procurement, legal, privacy, compliance, and technology teams, mentoring peers and integrating risk insights into vendor life cycles. Role offers hybrid/remote options.

Qualifications

• 7+ years of cybersecurity, third-party risk management, or related experience.
• Experience conducting vendor security assessments.
• Experience analyzing cybersecurity controls and remediation.
• Knowledge of NIST, ISO 27001, SOC 2, HITRUST, CIS or similar.
• Experience collaborating with cross-functional teams.
• Bachelor’s degree or equivalent.

Responsabilités

• Design and govern third-party risk management processes.
• Lead advanced vendor security assessments and remediation validation.
• Evaluate vendor cybersecurity posture against frameworks.
• Partner with procurement, legal, privacy, compliance, technology, and business teams.
• Develop continuous monitoring for critical vendors.
• Translate cyber risk findings into actionable recommendations.
• Support executive-ready risk reporting and dashboards.
• Mentor peers and standardize assessment practices.

Connaissances

Cybersecurity

Vendor risk management

Third‑party risk assessments

Security frameworks

Cross-functional collaboration

Formation

Bachelor’s degree

Outils

GRC tools

Vendor risk management tools

Reporting tools

Description du poste

McKesson Corporation seeks a Sr. Information Security Analyst to strengthen third-party risk management across our vendor ecosystem. You will design assessments, translate findings for stakeholders, and help shape governance in a regulated, enterprise-scale environment.

You’ll collaborate with procurement, legal, privacy, compliance, and technology teams, mentoring peers and integrating risk insights into vendor life cycles. Role offers hybrid/remote options.