Cloud Security Lead: Vulnerability Management

McKesson; Irving (TX); On-site; USD 122,000 - 204,000; Full time

Job summary

McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise risk. You will lead triage, remediation, and validation of cloud findings identified through Wiz, partnering with application, cloud platform, engineering, and infrastructure teams to resolve high-risk vulnerabilities.

This role requires cross-functional collaboration, remediation ownership, and the ability to translate technical findings into clear plans and leadership

Qualifications

• 7+ years of cybersecurity-related experience including cloud security and vulnerability management.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related field.
• Experience triaging and driving remediation of cloud findings and vulnerabilities.
• Hands-on experience with Wiz or similar cloud security platforms.
• Ability to prioritize using risk, severity, and asset context.

Responsibilities

• Monitor and triage cloud security findings identified through Wiz.
• Prioritize remediation using severity, exposure, and business impact.
• Drive remediation for Critical/High-risk and overdue findings with owners.
• Investigate unowned cloud assets and coordinate handoff to accountable teams.
• Review suppressions and risk-acceptance requests with audit-ready records.
• Validate closures and support root-cause investigations and trend analysis.
• Improve workflows, governance, and reporting; automate where possible.
• Report MTTR, critical findings, overdue vulnerabilities, and risk-reduction outcomes.

Skills

Cloud security

Vulnerability management

Risk-based prioritization

Education

Bachelor's degree

Tools

Wiz

ServiceNow

Rapid7

Panorama

Job description

McKesson is seeking a Senior Information Security Analyst to strengthen our cloud security posture and reduce enterprise risk. You will lead triage, remediation, and validation of cloud findings identified through Wiz, partnering with application, cloud platform, engineering, and infrastructure teams to resolve high-risk vulnerabilities.

This role requires cross-functional collaboration, remediation ownership, and the ability to translate technical findings into clear plans and leadership