Lead Information Security Analyst - Cyber Physical Security

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

The role is responsible to develop and maintain network security policies, standards and hardening guidelines for networks and technologies connected to and/or protecting McKesson’s Operational Technology environments. Working with the deployment teams, the role will assess current protection level of the network, infrastructure and Industrial Control Systems and the compliance of these assets towards McKesson policies, industry standards, customer expectations, threat intelligence and applicable legislation. (S)he will support projects, assess the effectiveness of the security of the network, infrastructure and ICS environment, and will, together with involved stakeholders, determine a solution strategy for detected security problems upon this scope. Where applicable the role supports investigations / forensics activities upon the network and ICS environment. Focus will be on protection and security of:

• Network devices such as (not limited to): routers, switches, firewalls, DHCP and DNS.
• Network and Datacenters (e.g. network access, network and DC segmentation).
• Operational Technology systems

Responsibilities:

• Provide subject matter expertise and support solution shaping in the field of IT Network and Industrial Control System (ICS) Security.
• Understand and assess security policies, standards, propose hardening guidelines for IT and OT networks
• The role will assess current protection level of the networks, infrastructure and Industrial Control Systems and the compliance of these assets towards Clients policies, standards and applicable legislation.
• The role will support projects, assess the effectiveness of the security of the network, and OT environments.
• Understand, research, design and develop secure implementations of technology solutions, and oversee large rollouts of the same.
• End-to-end analysis, requirements development, design, and governance of the security processes and tools ecosystem within McKesson Technology infrastructure, partnering with IT and business colleagues as appropriate
• Evaluate and POC next-generation network security solutions
• Support Security Architecture with the design and implementation of new network security solutions
• Operationalize network security solutions to provide optimal value through repeatable metric reporting, standardizing maintenance and continually finding and closing security gaps
• Train Operations teams to ensure a high-level understanding of network security solutions and how they relate to quantifiable risk
• Participate in Scaled Agile planning and activities deploying enterprise program creating Global Network Security Services within McKesson, identify customer needs, converting those into functional requirements and creating program roadmap, driving objectives and managing program backlog.

Minimum Requirements

• 6+ years’ experience in network systems administration
• 3+ years ICS/OT experience

Critical Skills

• Solid knowledge of security of SCADA/PLC network, industrial domain know-how, protocols and devices
• Expert in network devices (e.g. routers, switches, load balancers, DNS, DHCP) and proven track record of successful IT project contribution from concept to completion 6+ years of specialization in Network Security technologies including NAC, firewalls, wired and wireless security
• Familiar with future developments within the area of network security, data center security and ICS / SCADA security
• Expert level knowledge of all aspects of ICS/OT security
• Expert famil