Cyber Assurance Director & Risk Architecture Leader

McKesson Corporation; Richmond (VA); On-site; USD 150,000 - 250,000; Full time

Job summary

McKesson is seeking a Director of Cybersecurity Assurance to lead cyber risk management, security architecture, and policy across the security organization. You will manage a team of security leads and drive security by design with business and product teams, while owning the awareness program including phishing campaigns and tabletop exercises.

This leadership role sets the strategy, roadmaps, and success metrics; governs delivery rhythms; and partners with executive leadership to communicate

Qualifications

• 15+ years of cybersecurity experience with depth in security architecture, cyber advisory, and risk management.
• 10+ years leading teams and enterprise programs.
• Experience managing a security architecture program.
• Executive-ready communication with senior leadership.
• Ability to set strategy and drive outcomes with multiple stakeholders.

Responsibilities

• Design and own enterprise Cyber Assurance strategy and operating model.
• Lead security architecture program with design-for-security practices.
• Provide security advisory to business and applications; perform threat assessments.
• Partner with Threat Detection & Response to implement threat modeling.
• Develop and lead cybersecurity metrics and executive reporting (KPIs).
• Establish remediation program to close vulnerabilities and gaps.
• Lead cybersecurity risk management activities (audit, regulatory).
• Design policies, standards, and procedures with stakeholders.
• Lead cybersecurity awareness program including tabletop exercises and phishing campaigns.
• Oversee cybersecurity resiliency, incident response, and recovery.
• Develop asset management program within the cyber org.
• Lead third-party risk management processes.

Skills

Security architecture

Cyber assurance

Risk management

Executive communication

Threat modeling

Leadership

GRC

Vendor management

Education

Bachelor's degree in CS/InfoSec

Job description

McKesson is seeking a Director of Cybersecurity Assurance to lead cyber risk management, security architecture, and policy across the security organization. You will manage a team of security leads and drive security by design with business and product teams, while owning the awareness program including phishing campaigns and tabletop exercises.

This leadership role sets the strategy, roadmaps, and success metrics; governs delivery rhythms; and partners with executive leadership to communicate