Director of Cyber Assurance & Security Architecture

McKesson; Richmond (VA); Sur place; USD 150 000 - 250 000; Plein temps

Résumé du poste

McKesson is seeking a Director of Cybersecurity Assurance to lead the security organization’s assurance and advisory functions. This role heads a team of security leads and partners with business and product teams to enforce security by design.

You will set strategy, roadmaps, and metrics, oversee risk management and regulatory compliance, coordinate with audit, and drive remediation and incident response programs while communicating risk to executives.

Qualifications

• 15+ years of cybersecurity experience with depth in security architecture, cyber assurance and advisory, third party management, cyber GRC, risk management and compliance.
• 10+ years leading teams or enterprise programs.
• Experience building security architecture programs and driving remediation at scale.

Responsabilités

• Design and own enterprise Cyber Assurance strategy and operating model, including team build-out and roadmap.
• Lead security architecture to embed security by design across projects and platforms.
• Provide security advisory to business and application teams and perform risk assessments.
• Develop and lead cyber security metrics and executive reporting (KPIs).
• Establish remediation programs to close vulnerabilities and gaps identified through incidents, assessments and reviews.
• Lead cyber security risk management activities (audit, regulatory) with risk partners.
• Design and implement policies, standards, and governance with stakeholders.

Connaissances

Cybersecurity architecture

Cyber risk management

Security advisory

Leadership

Regulatory compliance

Threat modeling

Executive communication

Vendor management

Security program management

Formation

Bachelor's degree in computer science / information security / related field

Description du poste

McKesson is seeking a Director of Cybersecurity Assurance to lead the security organization’s assurance and advisory functions. This role heads a team of security leads and partners with business and product teams to enforce security by design.

You will set strategy, roadmaps, and metrics, oversee risk management and regulatory compliance, coordinate with audit, and drive remediation and incident response programs while communicating risk to executives.