This role pays more than
55%
of similar roles. Most pay
$177,250–$273,317
— the shaded band above.
At the midpoint, this role pays about
$229k
versus about
$225k
for comparable roles.
Based on 240 similar postings.
Employer
About McKesson Corporation
McKesson Corporation is a premier American healthcare services company that distributes pharmaceuticals, medical-surgical supplies, and provides technology to the healthcare industry.
McKesson Corporation currently has
61 open roles
on FindRole.
Listed pay typically runs
$121,100–$201,900
across 61 roles with salary data.
Sr. Director, Cyber Engineering leads teams responsible for engineering, implementing, and improving enterprise security controls across identity, endpoint, network, cloud, application, and data environments. This leader establishes the cybersecurity engineering strategy, multi-year roadmaps, and success metrics while managing the security engineering platform portfolio including IAM/PAM, PKI, EDR, CSPM, vulnerability management, secrets management, WAF, DLP, and SIEM/SOAR integrations. The role involves partnering with stakeholders to embed DevSecOps practices, automate controls, and ensure compliance-by-design across hybrid and cloud environments. Key responsibilities include managing vendor relationships, defining SLAs/SLOs, and translating technical risks into business impacts. The position requires expertise in infrastructure-as-code, policy-as-code, and various security frameworks like NIST, ISO 27001, HIPAA, and PCI DSS to solve complex problems regarding security resilience and operational efficiency within a large-scale healthcare distribution and supply chain environment.
Define and own the cybersecurity engineering strategy, operating model, and multi-year roadmaps aligned to business risk.
Manage the security engineering platform portfolio by selecting, integrating, and overseeing the lifecycle of security tools and services.
Establish executive-level metrics and scorecards to track control adoption, coverage, reliability, and automation impact.
Embed security into the development lifecycle by defining DevSecOps standards, reusable patterns, and automated guardrails.
Lead technical execution for risk-reduction initiatives including identity modernization, encryption, and vulnerability remediation across hybrid environments.
Build and lead high-performing cybersecurity engineering teams through hiring, coaching, and performance management.
Manage cross-functional relationships with technology leaders, risk, compliance, and legal teams to translate technical risks into business decisions.
Ensure security services are operationally mature by defining SLAs/SLOs and driving post-incident hardening improvements.
What we're looking for
Bachelor's degree in computer science, information security, engineering, or a related field (advanced degree preferred).
15+ years of professional experience in cybersecurity and technology with depth in building and operating security controls and platforms.
10+ years of leadership experience in planning, communication, organization, and people motivation.
Hands-on experience engineering capabilities such as IAM/PAM, network security, endpoint security, vulnerability management, and cloud security controls.
Executive-ready communication skills to translate technical risk into business impact for senior leadership.
Knowledge of governance and regulatory frameworks including NIST, ISO 27001, HIPAA, PCI DSS, SOX, and GDPR.
Experience managing vendor relationships, service contracts, and multi-year roadmaps for security platforms.
Relevant certifications such as CISSP, CISM, GIAC/SANS, +, SSCP, or Google Cloud Professional certifications (preferred).
DevSecOps
CI/CD
Cloud-Native Security
Software Supply Chain Security
Policy as Code
infrastructure-as-code
Microservices
Zero Trust
s as t
Artifact Signing
C/C++
Assembly
Reverse Engineering
Kernel Development
Vulnerability Research
TCP/IP
Wireshark
IDA Pro
Ghidra
WinDBG
QEMU
Git
CI/CD
Jenkins
Agile
Linux
Windows