{"id":2832203,"url":"https://alion.io/job/mckesson-senior-third-party-risk-tprm-cybersecurity-analyst","title":"Senior Third Party Risk (TPRM) Cybersecurity Analyst","company":{"id":4393,"name":"McKesson","domain":"mckesson.com","url":"https://alion.io/company/mckesson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":34,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cork, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":72800,"max":121300,"currency":"EUR","period":"year","gross":null,"usd_annual":136369},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"Gmail","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-27T03:24:19Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.\nWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.\nAbout the Role\nMcKesson is seeking a Sr. Information Security Analyst to help strengthen the security, resilience, and governance of our vendor and supplier ecosystem.\nIn this role, you will design and support third-party risk management practices, conduct advanced vendor security assessments, and translate security findings into clear risk insights for business, technology, legal, privacy, and compliance stakeholders.\nYou will play a key role in helping McKesson make informed decisions about third-party relationships in a regulated, enterprise-scale environment.\nWhat You’ll Do\nDesign, enhance, and govern third-party risk management processes, standards, workflows, and reporting practices. \nLead advanced vendor security assessments, including control reviews, inherent/residual risk analysis, and remediation validation. \nEvaluate vendor cybersecurity posture against recognized frameworks, regulatory expectations, and enterprise security requirements. \nPartner with procurement, legal, privacy, compliance, technology, and business stakeholders to integrate risk insights into vendor lifecycle decisions. \nDevelop continuous monitoring approaches for critical vendors, including risk indicators, issue tracking, reporting, and escalation. \nTranslate complex cyber risk findings into clear, actionable recommendations for technical and non-technical audiences. \nSupport executive-ready reporting, metrics, dashboards, and risk summaries to improve visibility into third-party cyber risk. \nMentor peers and contribute to consistent, scalable assessment practices across the third-party risk program. \nBasic Requirements\n7+ years of cybersecurity, third-party risk management, vendor security assessment, technology risk, or highly relevant technical experience. \nExperience conducting vendor security assessments, third-party risk reviews, or cyber risk/control assessments. \nExperience analyzing cybersecurity controls, identifying risk, documenting findings, and recommending remediation. \nKnowledge of common security and risk frameworks such as NIST, ISO 27001, SOC 2, HITRUST, CIS, or similar. \nExperience collaborating with cross-functional partners such as procurement, legal, privacy, compliance, technology, or business teams. \nAbility to create clear documentation, risk summaries, and stakeholder-ready communications. \nBachelor’s degree or equivalent combination of education and experience. \nPreferred Skills/Experience\nExperience designing or improving a third-party risk management program, governance model, or assessment methodology. \nExperience with continuous monitoring, vendor risk scoring, issue management, SLA tracking, or cyber risk dashboards. \nFamiliarity with healthcare, life sciences, financial services, or other regulated environments. \nExperience assessing cloud/SaaS providers, data security controls, access management, incident response, business continuity, or privacy/security obligations. \nCertifications such as CISSP, CISM, CRISC, CISA, CCSP, Security+, or similar. \nExperience using GRC, vendor risk management, workflow, or reporting tools. \nStrong analytical thinking, stakeholder influence, and ability to work through ambiguity. \nTravel / Work Environment / Physical Requirements\nWork arrangement may be remote, hybrid, or office-based depending on business and team needs. \nOccasional travel may be required for team, stakeholder, vendor, or business meetings. \nRole generally requires regular use of a computer and participation in virtual or in-person meetings. \nAt McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.\nAs part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.\nOur Base Pay Range for this position\n€72,800 - €121,300McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:\nMcKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.\nMcKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.\nMcKesson job postings are posted on our career site: careers.mckesson.com.","description_format":"text","description_chars":5895,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Health Care","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-19T03:39:23Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.573,"p_room":0.55,"age_days":22,"expected_fill_days":19,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":136369,"is_top_pay":false},"html_url":"https://alion.io/job/mckesson-senior-third-party-risk-tprm-cybersecurity-analyst","json_url":"https://alion.io/job/mckesson-senior-third-party-risk-tprm-cybersecurity-analyst.json","meta":{"generated_at":"2026-10-27T09:59:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11406,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4393},"rest":"https://alion.io/mcp/rest/get_company?id=4393"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmckesson-senior-third-party-risk-tprm-cybersecurity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmckesson-senior-third-party-risk-tprm-cybersecurity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmckesson-senior-third-party-risk-tprm-cybersecurity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mckesson-senior-third-party-risk-tprm-cybersecurity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmckesson-senior-third-party-risk-tprm-cybersecurity-analyst"}]}