Senior Director, Cybersecurity - M&A, Divestitures & Supply Chain Risk

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

McKesson is in the business of better health, and we touch the lives of patients in virtually every aspect of healthcare. We partner with payors, hospitals, physician offices, pharmacies, pharmaceutical companies, and others across the spectrum of care to build healthier organizations that deliver better care to patients in every setting. We believe in the importance of strong, vital organizations because we know that patients can only be healthy when our system is healthy.

Every single McKesson employee contributes to our mission-by joining McKesson you act as a catalyst in a chain of events that helps millions of people all over the globe. Talented, compassionate people are the future of our company-and of healthcare. At McKesson, you'll collaborate on the products and solutions that help us carry out our mission to improve lives and advance healthcare. Working here is your opportunity to shape an industry that's vital to us all.

Current Need

The Senior Director, Cybersecurity - M&A, Divestitures & Supply Chain Risk will be responsible for overseeing the development and implementation of advanced cybersecurity strategies, with a particular focus on third party security and leading cyber risk through mergers, acquisition and divestitures. This role will lead the cybersecurity strategy and execution for all merger, acquisition, and divestiture (M&A/D) activities, as well as third-party and supply chain security risk management.

The ideal candidate will bring deep expertise in cybersecurity due diligence, integration/separation planning, and third-party risk governance, with a proven ability to operate in fast-paced, high-stakes environments.

Key Responsibilities:

What You'll Do:

• Lead cybersecurity due diligence and risk assessments for all M&A and divestiture transactions.
• Develop and execute cybersecurity integration and separation strategies aligned with business objectives.
• Oversee third-party risk management programs, including vendor assessments, contract reviews, and ongoing monitoring.
• Collaborate with legal, compliance, IT, and business leaders to ensure secure and compliant transitions during M&A/D events.
• Establish and maintain cybersecurity standards and controls for supply chain and third-party ecosystems.
• Provide executive-level reporting on cybersecurity risks, mitigation strategies, and program performance.
• Drive continuous improvement in cybersecurity practices across acquired/divested entities and third-party engagements.
• Serve as a trusted advisor to executive leadership on cyber risks related to strategic business initiatives.
• Lead vendor negotiations related to cybersecurity terms and conditions.

Team Leadership and Development:

• Lead and mentor a team of cybersecurity professionals, fostering a culture of continuous improvement and excellence.
• Conduct performance reviews, provide feedback, and support professional development for team members.
• Promote collaboration and knowledge sharing within the team and across departments.

Minimum Requirements

Typically requires 13+ years of professional experience and 6+ years of diversified leadership, planning, communication, organization, and people motivation skills

Critical Skills

• Minimum of 13 years of experience in cybersecurity, with at least 6 years in a leadership role.
• Demonstrated experience leading cybersecurity efforts in M&A and divestiture transactions, including due diligence and post-close integration/separation.
• Extensive experience in a senior cybersecurity leadership role, with a focus In-depth knowledge of third-party risk management in a global business with diverse business units and technology platforms.
• Experience leading cyber focused dialogue with critical stakeholders through organizational activities such as mergers, acquisition and divestiture while actively promoting a culture of security first thinking.
• In-depth knowledge of cybersecurity frameworks, standards, and best practices (e.g., NIST, ISO 27001).

Additional Skills

• Excellent leadership, communication, and interpersonal skills.
• Relevant certifications such as CISSP, CISM, or equivalent are highly desirable
• Experience in a similar industry or with similar scale of operations.
• Strong project management skills and experience with Agile methodologies.
• Ability to think strategically and solve complex problems.
• Up-to-date knowledge of emerging cybersecurity trends and technologies.

Education

• Bachelor's degree in computer science, Information Security, or a related field OR related experience.

Working Conditions:

• Traditional office environment.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, pleaseclick here.

Our Base Pay Range for this position

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.

Join us at McKesson!