below marketmost similar roles pay hereabove market
This role pays less than
64%
of similar roles. Most pay
$185,375–$254,943
— the blue band above.
At the midpoint, this role pays about
$200k
versus about
$220k
for comparable roles.
Based on 240 similar postings.
Employer
About McKesson Corporation
McKesson Corporation is a premier American healthcare services company that distributes pharmaceuticals, medical-surgical supplies, and provides technology to the healthcare industry.
McKesson Corporation currently has
137 open roles
on FindRole.
Listed pay typically runs
$126,000–$210,000
across 77 roles with salary data.
The Director - Cyber Assurance leads the cyber assurance and advisory functions for the security organization. This leader manages a team of security leads overseeing cyber risk management, security architecture, regulatory and audit compliance, and policy development. Key responsibilities include designing the enterprise cyber assurance strategy, building a security architecture program to ensure security by design, and providing advisory services to business and application teams. The role involves performing threat assessments, leading cyber security awareness programs including phishing campaigns and tabletop exercises, and managing third-party risk. Required skills include deep expertise in security architecture, risk management, and compliance, alongside the ability to communicate risks to executive leadership. The position addresses the technical problem of identifying security control gaps and ensuring proper requirements are implemented into architecture designs.
Design and own the enterprise Cyber Assurance strategy, operating model, and multi-year roadmap.
Lead the security architecture practice to ensure security by design is embedded in all products and business processes.
Provide security advisory services and perform threat assessments to identify and remediate control gaps.
Develop and manage cyber security metrics, KPIs, and executive reporting processes to track program success.
Establish and oversee a remediation program to close security vulnerabilities identified through incidents and scans.
Lead cyber security risk management activities, including audits, regulatory compliance, and third-party risk assessments.
Design and implement enterprise security policies, standards, and procedures in partnership with key stakeholders.
Manage the cyber security awareness program, including phishing campaigns and tabletop exercises.
What we're looking for
Bachelor's degree in computer science, information security/assurance, engineering, or a related field; advanced degree preferred or equivalent experience.
15+ years of cybersecurity experience with depth in security architecture, cyber assurance, advisory, third-party management, and GRC.
10+ years of diversified leadership, planning, communication, organization, and people motivation skills.
Hands-on and leadership experience managing a security architecture program.
Proven ability to drive remediation outcomes at scale by establishing SLAs and closing systemic gaps.
Executive-ready communication skills to present risk, progress, and investment needs to senior leadership.
Experience developing multi-year roadmaps and influencing investment decisions for people, tooling, and automation.
Relevant certifications such as CISSP, CISM, GIAC/SANS, +, SSCP, or equivalent foundational security certification (preferred).