Vendor Cyber Risk Lead — Third-Party Security

McKesson’s Corporate; Cork; Hybrid; EUR 73,000 - 121,000; Full time

Job summary

McKesson seeks a Sr. Information Security Analyst to strengthen third-party risk management across our vendor ecosystem in a regulated, enterprise-scale environment.

You will design and support risk assessments, translate findings into actionable insights, and partner with procurement, legal, privacy, compliance, technology, and business teams. The role offers hybrid or remote work options, occasional travel, and a total rewards package.

Qualifications

• Experience with NIST, ISO 27001, SOC 2 or similar frameworks.
• Ability to translate findings into actionable risk recommendations.
• Experience collaborating with cross-functional teams (procurement, legal, privacy).

Responsibilities

• Design and govern third-party risk management processes.
• Lead advanced vendor security assessments and remediation validation.
• Evaluate vendor cybersecurity posture against frameworks and regulatory expectations.
• Partner with procurement, legal, privacy, compliance, technology, and business stakeholders to integrate risk insights.
• Develop continuous monitoring for critical vendors, including risk indicators and reporting.
• Translate complex risk findings into clear recommendations for technical and non-technical audiences.
• Support executive-ready reporting and risk summaries to improve visibility.
• Mentor peers and contribute to standardized assessment practices.

Skills

Third-party risk

Vendor security

Cybersecurity

Risk assessment

Stakeholder comms

Education

Bachelor's degree or equivalent

Job description

McKesson seeks a Sr. Information Security Analyst to strengthen third-party risk management across our vendor ecosystem in a regulated, enterprise-scale environment.

You will design and support risk assessments, translate findings into actionable insights, and partner with procurement, legal, privacy, compliance, technology, and business teams. The role offers hybrid or remote work options, occasional travel, and a total rewards package.