{"id":2885562,"url":"https://alion.io/job/mckesson-principal-ma-analyst-cyber","title":"Principal M&A Analyst Cyber","company":{"id":4393,"name":"McKesson","domain":"mckesson.com","url":"https://alion.io/company/mckesson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":32,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mississauga, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":149600,"max":199500,"currency":"CAD","period":"year","gross":null,"usd_annual":141573},"salary_estimate":null,"experience_years_min":13,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Gmail","optional":true}],"status":"live","first_seen_at":"2026-09-28T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-22T03:19:49Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.\nWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.\nMcKesson is seeking a Principal M&A Analyst Cyber to support cybersecurity due diligence and risk assessment activities across mergers, acquisitions, divestitures, and strategic investments. This role serves as a trusted advisor to business and technology stakeholders, helping evaluate target-company cybersecurity programs, identify risks, document findings, and support integration planning.\nThe successful candidate will partner with cybersecurity, legal, compliance, technology, and business teams to assess security posture, recommend remediation strategies, and help protect enterprise value throughout the transaction lifecycle. This role is ideal for a cybersecurity professional who combines strong analytical skills, risk management expertise, and collaborative leadership.\nWhat You'll Do\nEnterprise Cybersecurity Due Diligence Leadership\nLead cybersecurity due diligence assessments for mergers, acquisitions, and strategic transactions.\nEvaluate target company security controls, governance practices, regulatory compliance, and cyber risks.\nDocument cybersecurity findings, risk ratings, and remediation requirements for stakeholders and executive audiences.\nCoordinate with security, infrastructure, application, privacy, and compliance teams on integration risk assessments.\nAssess third-party, cloud, identity, vulnerability, and data protection risks associated with acquisition targets.\nProvide actionable recommendations that help inform transaction decisions and post-close integration planning.\nCollaborate with cross-functional stakeholders to ensure cybersecurity risks are tracked, mitigated, and communicated effectively.\nFinancial and Integration Planning Inputs\nOwn the cybersecurity contribution to the transaction cost model, including preliminary one-time and recurring cost estimates, assumptions, contingencies, and key estimation risks.\nIdentify potential Day 1, initial hardening, Employee Day 1, and longer-term integration requirements to inform transaction decisions and subsequent planning.\nDefine the recommended cybersecurity integration principles, priorities, planning guardrails, and critical dependencies arising from due diligence.\nPartner with Finance, Cybersecurity Service Areas, Infrastructure, Enterprise Applications, Enterprise Architecture, and MT M&A leadership to ensure cybersecurity risk and cost implications are reflected consistently in deal materials.\nStrategic Deal Advisory and Executive Influence\nTranslate complex cybersecurity findings into clear business implications, including potential deal impact, risk acceptance requirements, cost exposure, timing constraints, and integration complexity.\nIdentify, prioritize, and escalate material or potentially deal-altering cybersecurity risks, with practical recommendations and clearly articulated trade-offs.\nAdvise transaction leaders on cybersecurity considerations affecting valuation, deal structure, contractual protections, closing conditions, transition services, and investment requirements.\nDeliver concise, decision-oriented cybersecurity recommendations to executive leadership.\nServe as the senior cybersecurity diligence advisor in high-ambiguity situations where evidence is incomplete, timelines are compressed, and decisions carry significant enterprise consequence.\nGovernance, Standards, and Capability Building\nEstablish and maintain enterprise standards, playbooks, templates, quality criteria, and escalation thresholds for M&A cybersecurity due diligence.\nProvide portfolio-level visibility into cybersecurity diligence status, material risk themes, cost exposure, and recurring integration complexity across concurrent transactions.\nDrive consistency and quality across internal subject matter experts and external advisors supporting diligence activities.\nIncorporate lessons learned and evolving threat, regulatory, and technology considerations into the cybersecurity M&A diligence methodology.\nBasic Requirements\n13+ years of professional experience with 8+ years of direct experience in cybersecurity, information security, cyber risk, security consulting, or related disciplines.\nBachelor's degree or equivalent combination of education and experience.\nSignificant experience leading cybersecurity due diligence or cyber risk assessment for mergers, acquisitions, divestitures, strategic investments, or similarly complex enterprise transactions.\nKnowledge of NIST CSF, ISO 27001, HITRUST, SOC 2, HIPAA, PCI DSS, GDPR, and other relevant security or privacy frameworks.\nExperience evaluating security controls across cloud, infrastructure, applications, identity, and data protection domains.\nStrong stakeholder management and cross-functional collaboration skills.\nProven written and verbal communication skills with the ability to present risk information clearly.\nRecognized expertise in enterprise cybersecurity risk, control environments, security architecture, regulatory considerations, and integration complexity.\nDemonstrated ability to shape executive decisions through clear risk, financial, and strategic recommendations.\nExperience directing cross-functional work through influence in highly matrixed, time-sensitive, and confidential environments.\nStrong financial acumen, including cost estimation, assumption development, scenario analysis, and communication of uncertainty.\nPreferred Skills/Experience\nExperience assessing regulatory and compliance considerations, including privacy and data protection requirements.\nFamiliarity with cyber threat management, vulnerability management, incident response, or security operations.\nExperience developing cybersecurity governance processes, assessment methodologies, or due diligence frameworks.\nProfessional certifications such as CISSP, CISM, CRISC, CCSP, GIAC, or relevant cloud security certifications.\nExperience supporting post-acquisition integration planning and risk remediation programs.\nAdvanced analytical, risk prioritization, and executive presentation skills.\nMaster's degree in Cybersecurity, Information Technology, Business, or a related field.\nWe are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.\nOur Base Pay Range for this position\n$149,600 - $199,500McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:\nMcKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.\nMcKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.\nMcKesson job postings are posted on our career site: careers.mckesson.com.\nMcKesson is an Equal Opportunity Employer\nMcKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.\nMcKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States)  or (Canada) . Resumes or CVs submitted to this email box will not be accepted.\nJoin us at McKesson!","description_format":"text","description_chars":9041,"description_truncated":false,"requirements":{"experience_years_min":13,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Information Security","Pharmaceutical Distribution","Medical Equipment Distribution"],"lifecycle":[{"event":"open","at":"2026-10-20T00:16:12Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.464,"p_room":0.35,"age_days":24,"expected_fill_days":12,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":141573,"is_top_pay":false},"html_url":"https://alion.io/job/mckesson-principal-ma-analyst-cyber","json_url":"https://alion.io/job/mckesson-principal-ma-analyst-cyber.json","meta":{"generated_at":"2026-10-22T07:01:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2311,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4393},"rest":"https://alion.io/mcp/rest/get_company?id=4393"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmckesson-principal-ma-analyst-cyber"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmckesson-principal-ma-analyst-cyber"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmckesson-principal-ma-analyst-cyber"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mckesson-principal-ma-analyst-cyber\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmckesson-principal-ma-analyst-cyber"}]}