Sr. Cyber Security Analyst

$118,100 - $196,900/Yr

McKesson - Irving, TX

Full-time - Mid Level

Irving, TX

1-10 employees

Merchant Wholesalers, Nondurable Goods

About the position

McKesson is seeking a Sr. Information Security Analyst specializing in Operational Technology (OT) to join our Global Information Security and Risk Management function. This role is pivotal in implementing and managing security tools and technologies that protect our Operational Technology environment. The analyst will lead multiple engineering efforts aimed at mitigating cyber risks across McKesson's distribution centers and will extend their influence to various other solutions and services within the McKesson portfolio, including Specialty Health and robotics. In this position, the Sr. Information Security Analyst will collaborate closely with the Sr. Manager of OT Security to address cyber-risk mitigation activities. The responsibilities include assessing the current protection levels of networks, infrastructure, and Industrial Control Systems (ICS), ensuring compliance with McKesson policies, industry standards, and applicable legislation. The analyst will also support projects aimed at evaluating the effectiveness of security measures in place and will work with stakeholders to determine strategies for improving the security posture of the organization. The role requires a strong focus on the protection and security of various network devices, including routers, switches, firewalls, DHCP, and DNS, as well as the overall security of network access and data centers. Additionally, the analyst will conduct audits and support Business Continuity and Disaster Recovery processes, ensuring that McKesson's operational technology remains secure and resilient against potential threats.

Responsibilities

• Provides support of solution implementation in the field of Operational Technology (OT) Security
• Understands and documents security policies and standards
• Supports implementation of hardening guidelines for network, infrastructure, and OT networks
• Assesses current protection level of the networks, infrastructure, and Industrial Control Systems
• Supports compliance of OT Security assets in accordance with policies, standards, and applicable legislation
• Oversees the implementation of architecture, tools, and technology protecting the OT/ICS environments
• Supports projects and assesses the effectiveness of the security of the network, infrastructure, and ICS environment
• Supports Business Continuity and Disaster Recovery processes

Requirements

• Proven experience in information security, particularly in Operational Technology environments
• Strong understanding of security policies, standards, and compliance requirements
• Experience with network devices such as routers, switches, and firewalls
• Knowledge of Industrial Control Systems (ICS) and their security requirements
• Ability to assess and improve security postures of networks and infrastructure
• Experience in conducting audits and compliance assessments
• Strong analytical and problem-solving skills
• Excellent communication and collaboration skills

Nice-to-haves

• Certifications in cybersecurity (e.g., CISSP, CISM, or similar)
• Experience with risk management frameworks
• Familiarity with threat intelligence and incident response processes
• Knowledge of Business Continuity and Disaster Recovery planning

Benefits

• Competitive compensation package
• Annual bonus opportunities
• Long-term incentive opportunities
• Comprehensive health insurance
• 401k retirement savings plan
• Paid time off and holidays
• Employee discounts and wellness programs