McKesson

McKesson

Lead Cyber Security Architect

USA, VA, Richmond · Senior

Sponsorship not specifiedDetected 112 days ago
PythonBashPowerShellCode ReviewGCPKubernetesCI/CDLinuxDevOpsCybersecurityNetwork SecuritySIEMSOARComplianceExcelZero TrustHIPAALeadershipCommunicationMentoringAdaptabilityCISSP

Stay score

odds of building a lasting career here

42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card follow-through: 81%

Of 21 labor certifications old enough to have been used, 4 expired without the employer filing the next step. Median time from filing to decision: 484 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 22 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • This role provides expert guidance on current security issues while anticipating where threats and technology are heading to proactively shape MMS security strategy.

Responsibilities

  • Own and evolve MMS security architecture reference patterns and guardrails across cloud, network, identity, endpoint, application, and data protection
  • ensure designs are secure-by-design and compliant-by-design.
  • Lead architecture reviews for key initiatives (new platforms, major applications, third-party integrations, and B2B/B2C capabilities)
  • Translate security policy, risk, and regulatory obligations into practical engineering requirements, reusable design standards, and implementation guidance (e.g., templates, runbooks, and secure reference implementations).
  • drive organizational alignment and prioritization with security, technology, and business stakeholders.
  • partner with engineering teams to increase automation and reduce friction.
  • perform critical self-review and peer review of deliverables to ensure high quality, accuracy, and alignment to enterprise security standards.
  • Design and maintain cloud security architecture patterns and guardrails (e.g., IAM and privileged access, organization policies, network segmentation, encryption and key management, logging/monitoring, vulnerability management, and posture management) with clear implementation guidance for delivery teams.
  • Perform other duties as assigned.
  • Own and evolve MMS security architecture reference patterns and guardrails across cloud, network, identity, endpoint, application, and data protection; ensure designs are secure-by-design and compliant-by-design.

Requirements

  • Degree or equivalent and typically requires 10+ years of relevant experience.
  • Less years required if has relevant Master's or Doctorate qualifications
  • Ability to communicate technical risk and tradeoffs in business terms, influence decisions at multiple levels, and facilitate productive outcomes across security, engineering, and business stakeholders.
  • Experience improving detection and response capabilities at scale (SIEM, EDR/XDR, SOAR, threat intelligence), including driving architectural remediation and hardening based on incidents and post-incident reviews.
  • Proven ability to define and operationalize security standards, patterns, and guardrails (including exception processes), and to ensure adoption through reviews, coaching, documentation, and automation.
  • Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and holding a high bar for quality through critical self-review and thoughtful peer review.
  • Hands-on ability to automate and enable teams through scripting and infrastructure-as-code (e.g., Bash, Python, PowerShell) and policy-as-code approaches.
  • Experience designing for cyber resilience (disaster recovery, business continuity, backup/restore security, and ransomware recovery considerations).
  • Lead architecture reviews for key initiatives (new platforms, major applications, third-party integrations, and B2B/B2C capabilities); document decisions, risks, exceptions, and required compensating controls.

Nice to have

  • Experience with modern security platforms and automation (e.g., SIEM, EDR/XDR, SOAR, secrets management, and data protection) plus scripting/automation to scale controls.

Skills

  • 10+ years in cybersecurity with 5+ years in security architecture, including risk management and compliance.

Compensation

  • We will also continue to be one of the largest medical-surgical distributors in the U.S., with over $11B in annual sales.

Company info

  • We are known for delivering insights, products, and services that make quality care more accessible and affordable.
  • If you want to be part of tomorrow's health today, we want to hear from you.
  • This separation would accelerate our mission and empower us to shape a future defined by customer-centricity, bold thinking and operational excellence.
Apply directly at McKesson →Create a free account for alerts like thisView McKesson immigration profile

This listing is sourced directly from McKesson's careers page and normalized into a canonical job model.