Senior Director – Cybersecurity Identity & Access Management

McKesson

. Establish, drive, and own the Identity & Access Management vision, multi-year strategy, roadmap, and operational model .

Posted 10/16/2026full-timeUnited StatesSenior💰 $174,800 - $291,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity and Access Management (IAM), including the development and execution of multi-year strategies, governance frameworks, and operational models. Proven ability to lead teams, manage complex identity solutions, and ensure compliance with regulatory standards across multi-cloud environments.

Highest-signal resume keywords

Identity And Access ManagementCybersecurity LeadershipCloud Identity ArchitectureStakeholder ManagementRegulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Single Sign-On (SSO)Multi-Factor Authentication (MFA)Identity GovernancePrivileged Access ManagementThreat DetectionLifecycle ManagementAccess CertificationsRBACAutomationCloud Migration

Soft Skills

LeadershipCommunicationOrganizationPeople MotivationStrategic Decision-Making

Tools & Technologies

Azure/Entra IDGoogle Cloud Platform (GCP)OktaIdentity ServicesSecurity Tooling

Certifications & Qualifications

CISSPCISMGIAC/SANSSSCPGoogle Cloud Certifications

Industry Keywords

Identity Management GovernanceOperational MetricsCompliance StandardsRisk ManagementCybersecurity Metrics

Tech Stack

Tools & technologies

AzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Establish, drive, and own the Identity & Access Management vision, multi-year strategy, roadmap, and operational model
Hire, empower, and manage the IAM organization
Implement and oversee SSO, MFA, credential vaulting, identity governance, privileged access management, secrets management, lifecycle management, access certifications, threat detection, third-party governance, and CIAM
Design tailored identity solutions for complex or non-standard deployment scenarios
Oversee identity management governance, performance metrics, and non-compliance remediation
Develop industry relationships to implement current technology and best practices
Lead cybersecurity metrics and executive reporting, including KPIs and metrics
Partner with technology and application teams to onboard applications to enterprise-approved identity services during cloud migration
Partner with risk management and compliance stakeholders to maintain regulatory alignment
Establish non-human identity governance and secrets management controls across multi-cloud environments
Implement identity threat detection and response capabilities
Drive cross-functional access governance, least privilege, RBAC, and automated joiner-mover-leaver workflows
Architect cloud and federated identity models across Azure/Entra ID, GCP, Okta, hybrid, and multi-cloud infrastructures
Lead M&A identity integration and divestiture strategies
Architect and deliver scalable, fault-tolerant, highly available enterprise identity products and services
Leverage automation, AI, and ML for lifecycle governance, provisioning, and identity threat detection
Report directly to the Chief Information Security Officer

Requirements

What you’ll need

Degree or equivalent experience
Typically 15+ years of professional experience
10+ years of diversified leadership, planning, communication, organization, and people motivation skills, or equivalent experience
15+ years of cybersecurity experience with significant depth in identity and access management, engineering, architecture, risk management, compliance, and technology
10+ years leading teams and/or enterprise programs
Hands-on and leadership experience managing and building an identity and access management program
Experience driving remediation outcomes at scale, establishing SLAs, prioritizing backlogs, and closing systemic gaps
Executive-ready communication and stakeholder management skills
Ability to set strategy, secure organizational alignment and approvals, and deliver outcomes through multiple stakeholders
Deep understanding of cybersecurity IAM, engineering, risk management, compliance, and architecture
Experience establishing oversight metrics and operational rhythms, including OKRs/KPIs, reporting, and service reviews
Working knowledge of governance and regulatory expectations
Track record of building high-performing teams and leading with integrity, accountability, and operational discipline
Experience developing multi-year roadmaps and influencing investment decisions
Experience managing vendor relationships and service contracts for security tooling and managed services
Strong understanding of privacy considerations and appropriate monitoring practices
Experience operating in hybrid/cloud environments and partnering with platform teams to instrument systems
Strong strategic and tactical decision-making ability
Experience leading or sponsoring purple team activities, tabletop exercises, and control validation
Bachelor's degree in computer science, information security/assurance, engineering, or a related field; advanced degree preferred or equivalent experience
Relevant certifications preferred: CISSP, CISM, GIAC/SANS, SSCP, Google Cloud, or equivalent security/cloud certifications

Benefits

Comp & perks

Competitive compensation package
Annual bonus may be offered
Long-term incentive opportunities may be offered
Benefits through McKesson Total Rewards
Equal employment opportunities
Reasonable accommodation for job search or application