What You'll Do
Design and maintain enterprise security architecture aligned with cyber risk, compliance, and business objectives.
Architect ServiceNow Security Operations solutions, including Vulnerability Response and Threat Intelligence integrations.
Develop security data models and enterprise risk integrations that enhance visibility, reporting, and decision-making.
Design Identity and Access Management (IAM) and Zero Trust architecture patterns across enterprise applications and platforms.
Establish role-based access controls (RBAC), ACL configurations, and least-privilege security standards to protect sensitive data.
Partner with security, compliance, and risk teams to implement GRC/IRM frameworks and governance controls.
Create architecture standards, technical roadmaps, reference models, and solution design documentation.
Evaluate emerging technologies, security tools, and integration strategies to continuously improve security capabilities.
Basic Requirements
5+ years of professional experience in cybersecurity architecture, security engineering, ServiceNow architecture, IAM, GRC, or related security disciplines.
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field, or equivalent experience.
Experience designing and implementing security architecture solutions in enterprise environments.
Hands-on experience with Vulnerability Response, Threat Intelligence, Security Operations, or security workflow automation solutions.
Experience implementing Identity and Access Management controls, role-based access models, and least-privilege frameworks.
Knowledge of Zero Trust principles, enterprise security controls, and data protection requirements.
Experience developing architecture documentation, standards, and technical design artifacts.
Strong communication and stakeholder management skills.
Preferred Skills/Experience
Experience with ServiceNow Security Operations (SecOps) modules.
Experience with ServiceNow Integrated Risk Management (IRM) and Governance Risk & Compliance (GRC).
Experience implementing enterprise security data models and risk integration strategies.
Knowledge of regulatory and compliance frameworks such as NIST, ISO 27001, HITRUST, SOX, HIPAA, or similar standards.
Experience integrating security platforms, vulnerability scanners, IAM tools, CMDBs, and threat intelligence feeds.
Experience supporting cloud security architectures across Azure, AWS, or Google Cloud Platform.
Preferred certifications
o CISSP
o ServiceNow CIS-SecOps
o ServiceNow CIS-Risk
Experience leading architecture reviews, solution governance, and cross-functional security initiatives.
Travel, Work Environment & Physical Requirements
Limited travel may be required based on business needs.
Position may be remote, hybrid, or office-based depending on organizational requirements.
Ability to work at a computer workstation for extended periods and participate in virtual and in-person meetings.
At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.
Our Base Pay Range for this position
€57,000 - €95,000
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: careers.mckesson.com.
