Lead Cybersecurity Architect – Data

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Overview:

The Cybersecurity Architect is a lead role responsible for designing, implementing, and maintaining robust security systems and architectures that safeguard the organization's information assets. As a technical lead, the Cybersecurity Architect acts as a strategic contributor, driving innovative solutions and collaborating with cross-functional teams to achieve organizational objectives. This position combines technical expertise, project leadership, and influence across teams to address complex cybersecurity challenges.

Key Responsibilities:

1. Security Architecture Design

• Develop and lead the creation of comprehensive security architectures, ensuring alignment with industry best practices and regulatory requirements.

• Provide detailed security design specifications and architectural diagrams.

• Proactively identify and address architectural weaknesses.

2. Implementation and Integration

• Oversee the implementation and integration of security systems into the organization's existing IT infrastructure.

• Collaborate with IT, software development, and other teams to deploy secure solutions.

• Validate the effectiveness of security controls and ensure their optimal operation.

3. Technology and Solution Evaluation

• Evaluate emerging security technologies and recommend best-fit solutions based on organizational needs.

• Conduct proof-of-concept evaluations to vet potential security solutions.

• Provide guidance on improvements and optimizations for current systems.

4. Technical Leadership and Support

• Act as a technical consultant and mentor to less experienced colleagues and teams.

• Provide subject-matter expertise during critical incident response and troubleshooting.

• Offer innovative, state-of-the-art solutions to address complex security challenges.

5. Compliance and Governance

• Ensure that all security designs comply with regulatory and organizational standards.

• Participate in internal and external security assessments, audits, and remediation planning.

• Maintain comprehensive documentation for all security systems, processes, and designs.

6. Collaboration and Communication

• Serve as a liaison between technical teams, senior management, and external stakeholders to ensure alignment on security objectives.

• Present complex security concepts to both technical and non-technical audiences effectively.

• Drive cross-team initiatives to embed security as a core component of organizational processes.

7. Innovation and Continuous Improvement

• Anticipate future cybersecurity challenges and proactively drive innovative solutions.

• Lead efforts to develop new security principles, methodologies, and practices.

• Champion long-term projects and strategies that align with the organization's vision.

Qualifications:

Education

• Bachelor’s degree (in Computer Science, Information Technology, Cybersecurity, or a related field), or equivalent work experience.

Experience

• 8 - 10 years of professional experience in cybersecurity with significant focus on security architecture.

• Proven track record of designing and implementing enterprise-level security systems.

• Experience with diverse security technologies, including network security, cloud security, and application security.

Technical Skills

• Deep understanding of advanced security frameworks and principles.

• Expertise in designing scalable and resilient security solutions.

• Proficiency in technologies such as firewalls, encryption protocols, IAM solutions, and SIEM platforms.

Certifications

• Relevant certifications such as CISSP, CISM, TOGAF, or equivalent.