McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

About the Role

McKesson is seeking a Security Architect to help design, implement, and evolve enterprise security capabilities across Security Operations, Identity and Access Management, Integrated Risk Management, and compliance programs. This role will serve as a strategic architecture leader responsible for building secure, scalable, and compliant solutions that strengthen cyber resilience while supporting business objectives.

The ideal candidate brings a combination of security architecture expertise, ServiceNow platform knowledge, and experience designing integrated solutions for Vulnerability Response, Threat Intelligence, IAM, Zero Trust, and GRC programs. This position collaborates closely with security, risk, compliance, infrastructure, and application teams to drive enterprise-wide security outcomes.

What You'll Do

● Design and maintain enterprise security architecture aligned with cyber risk, compliance, and business objectives.

● Architect ServiceNow Security Operations solutions, including Vulnerability Response and Threat Intelligence integrations.

● Develop security data models and enterprise risk integrations that enhance visibility, reporting, and decision-making.

● Design Identity and Access Management (IAM) and Zero Trust architecture patterns across enterprise applications and platforms.

● Establish role-based access controls (RBAC), ACL configurations, and least-privilege security standards to protect sensitive data.

● Partner with security, compliance, and risk teams to implement GRC/IRM frameworks and governance controls.

● Create architecture standards, technical roadmaps, reference models, and solution design documentation.

● Evaluate emerging technologies, security tools, and integration strategies to continuously improve security capabilities.

Basic Requirements

● 5+ years of professional experience in cybersecurity architecture, security engineering, ServiceNow architecture, IAM, GRC, or related security disciplines.

● Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field, or equivalent experience.

● Experience designing and implementing security architecture solutions in enterprise environments.

● Hands-on experience with Vulnerability Response, Threat Intelligence, Security Operations, or security workflow automation solutions.

● Experience implementing Identity and Access Management controls, role-based access models, and least-privilege frameworks.

● Knowledge of Zero Trust principles, enterprise security controls, and data protection requirements.

● Experience developing architecture documentation, standards, and technical design artifacts.

● Strong communication and stakeholder management skills.

Preferred Skills/Experience

● Experience with ServiceNow Security Operations (SecOps) modules.

● Experience with ServiceNow Integrated Risk Management (IRM) and Governance Risk & Compliance (GRC).

● Experience implementing enterprise security data models and risk integration strategies.

● Knowledge of regulatory and compliance frameworks such as NIST, ISO 27001, HITRUST, SOX, HIPAA, or similar standards.

● Experience integrating security platforms, vulnerability scanners, IAM tools, CMDBs, and threat intelligence feeds.

● Experience supporting cloud security architectures across Azure, AWS, or Google Cloud Platform.

● Preferred certifications:

o CISSP

o ServiceNow CIS-SecOps

o ServiceNow CIS-Risk

● Experience leading architecture reviews, solution governance, and cross-functional security initiatives.

Travel, Work Environment & Physical Requirements

● Limited travel may be required based on business needs.

● Position may be remote, hybrid, or office-based depending on organizational requirements.

● Ability to work at a computer workstation for extended periods and participate in virtual and in-person meetings.

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.  In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. 

Our Base Pay Range for this position

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.