Security Architect

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

McKesson is seeking a Security Architect to help design, implement, and evolve enterprise security capabilities across Security Operations, Identity and Access Management, Integrated Risk Management, and compliance programs. This role will serve as a strategic architecture leader responsible for building secure, scalable, and compliant solutions that strengthen cyber resilience while supporting business objectives. The ideal candidate brings a combination of security architecture expertise, ServiceNow platform knowledge, and experience designing integrated solutions for Vulnerability Response, Threat Intelligence, IAM, Zero Trust, and GRC programs. This position collaborates closely with security, risk, compliance, infrastructure, and application teams to drive enterprise-wide security outcomes. What You'll Do ● Design and maintain enterprise security architecture aligned with cyber risk, compliance, and business objectives. ● Architect ServiceNow Security Operations solutions, including Vulnerability Response and Threat Intelligence integrations. ● Develop security data models and enterprise risk integrations that enhance visibility, reporting, and decision-making. ● Design Identity and Access Management (IAM) and Zero Trust architecture patterns across enterprise applications and platforms. ● Establish role-based access controls (RBAC), ACL configurations, and least-privilege security standards to protect sensitive data. ● Partner with security, compliance, and risk teams to implement GRC/IRM frameworks and governance controls. ● Create architecture standards, technical roadmaps, reference models, and solution design documentation. ● Evaluate emerging technologies, security tools, and integration strategies to continuously improve security capabilities. Basic Requirements ● 5+ years of professional experience in cybersecurity architecture, security engineering, ServiceNow architecture, IAM, GRC, or related security disciplines. ● Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field, or equivalent experience. ● Experience designing and implementing security architecture solutions in enterprise environments. ● Hands-on experience with Vulnerability Response, Threat Intelligence, Security Operations, or security workflow automation solutions. ● Experience implementing Identity and Access Management controls, role-based access models, and least-privilege frameworks. ● Knowledge of Zero Trust principles, enterprise security controls, and data protection requirements. ● Experience developing architecture documentation, standards, and technical design artifacts. ● Strong communication and stakeholder management skills. Preferred Skills/Experience ● Experience with ServiceNow Security Operations (SecOps) modules. ● Experience with ServiceNow Integrated Risk Management (IRM) and Governance Risk & Compliance (GRC). ● Experience implementing enterprise security data models and risk integration strategies. ● Knowledge of regulatory and compliance frameworks such as NIST, ISO 27001, HITRUST, SOX, HIPAA, or similar standards. ● Experience integrating security platforms, vulnerability scanners, IAM tools, CMDBs, and threat intelligence feeds. ● Experience supporting cloud security architectures across Azure, AWS, or