Senior Director, IAM & Enterprise Security Strategy

McKesson Corporation; New York (NY); On-site; USD 175,000 - 291,000; Full time

Job summary

McKesson Corporation is seeking a Senior Director of Identity & Access Management (IAM) to shape enterprise identity strategy, lead security engineers, and drive governance across multi-cloud environments. You will report to the CISO and build a high-performing team delivering scalable IAM services.

This role requires deep IAM expertise, strong leadership, and a track record building roadmaps, with focus on zero-trust, SSO/MFA, and risk reporting to executives.

Qualifications

• 15+ years in cybersecurity with IAM, architecture, risk, and compliance.
• Hands-on and leadership experience building an IAM program.
• Proven ability to drive remediation outcomes at scale establishing SLAs, ownership, backlogs.

Responsibilities

• Define IAM vision, multi-year roadmap, and operational model; hire and manage IAM org.
• Implement core IAM capabilities: SSO, MFA, vaulting, identity governance, PAM, CIAM.
• Design tailored identity solutions for complex deployments.
• Oversee governance, ensure metrics, remediate non-compliance with business teams.
• Architect resilient cloud and hybrid identity models; enable enterprise cloud migration.

Skills

IAM leadership

Identity & Access Management

Zero Trust

RBAC & ABAC

Cloud security

Executive communication

Risk management

Vendor management

Compliance knowledge

Automation & ML

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

Okta

Azure AD

Entra ID

GCP

CIAM platforms

Job description

McKesson Corporation is seeking a Senior Director of Identity & Access Management (IAM) to shape enterprise identity strategy, lead security engineers, and drive governance across multi-cloud environments. You will report to the CISO and build a high-performing team delivering scalable IAM services.

This role requires deep IAM expertise, strong leadership, and a track record building roadmaps, with focus on zero-trust, SSO/MFA, and risk reporting to executives.