S'INSCRIRE

Offres d'emploi

Trouvez des postes près de chez vous, sur site, hybrides ou à distance.
  • Emplois similaires à : Senior Data Security Architect
XX
Senior Data Security ArchitectMcKesson’s Corporate • Columbus, Ohio, United States
Postuler Maintenant
XX

Senior Data Security Architect

McKesson’s Corporate
  • US
    Columbus, Ohio, United States
  • US
    Columbus, Ohio, United States
Postuler Maintenant

À propos

CoverMyMeds Technology is seeking a Senior Data Security Architect (Data Platform Security) to join our Data & Analytics organization. This role defines, implements, and governs enterprise‑wide data security architecture across cloud and hybrid data platforms, protecting sensitive healthcare data and ensuring compliance while enabling analytics and data sharing. Key Responsibilities Own and evolve enterprise data security architecture across Databricks, Azure Data Lake, and enterprise reporting platforms. Design and enforce fine‑grained data access controls (RBAC, ABAC, row/column‑level security) using Unity Catalog and governed tagging frameworks. Architect identity and access management (IAM) patterns integrating Okta, Microsoft Entra ID, SailPoint, and privileged access platforms. Define and implement PHI/PII protection strategies, including tokenization, encryption, de‑identification, and masking across environments. Establish secure data sharing and multi‑tenant access models for external customers, partners, and embedded analytics. Lead architecture for data rights, entitlements, and consent‑based access controls, ensuring compliance with contractual and regulatory requirements. Build and operationalize security controls aligned to SOX ITGC, including logical access controls, change management, and audit evidence frameworks. Design audit‑ready security architectures supporting HIPAA, SOC2 TypeII, and FedRAMP compliance requirements. Partner with engineering, SRE, and platform teams to embed security into CI/CD pipelines, platform onboarding, and development standards. Define and govern data classification, tagging, and lineage‑aware security policies across medallion architectures. Evaluate and recommend enterprise security tooling and governance platforms. Produce architecture artifacts (decision records, control matrices, audit evidence) consumable by internal and external auditors. Basic Requirements Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience). 7+ years of relevant experience in data security, cybersecurity, or data architecture with a significant focus in cloud‑based environments. Proven experience implementing data security and governance controls in regulated environments (HIPAA, healthcare preferred). Strong expertise in SOX IT General Controls (ITGC) domains, including logical access, change management, and audit controls. Hands‑on experience with Databricks Unity Catalog security models (RBAC, ABAC, data masking). Deep knowledge of Azure cloud security architecture, including networking, identity, and secrets management. Experience designing identity and access management solutions (Okta, EntraID, SailPoint, privileged access tools). Demonstrated experience implementing encryption, tokenization, and de‑identification strategies for sensitive data. Experience designing secure data architectures for external/customer‑facing analytics products. Ability to translate regulatory requirements into implemented technical controls and audit artifacts. Strong communication skills with the ability to present architecture concepts to technical, business, and audit stakeholders. Preferred Skills & Experience Experience supporting SOC2 TypeII and/or FedRAMP compliance programs. Knowledge of healthcare data sharing frameworks and consent models. Experience designing data entitlement models and purpose‑based access controls at scale. Familiarity with FHIR‑based data platforms and interoperability security. Experience with DSPM/CSPM tools for cloud data security. Experience implementing non‑production data masking and synthetic data solutions. Exposure to CI/CD security architecture and service principal hardening. Experience operating in large, matrixed enterprise governance environments. McKesson complies with all applicable U.S. immigration laws and regulations. The Company does not provide employer support or sponsorship for any immigration‑related employment benefit for this role. Applicants must be currently authorized to work in the United States on a full‑time basis without the need for employer support or sponsorship now or in the future. Equal Opportunity Employer McKesson is an Equal Opportunity Employer. We provide equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on our full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by emailing Disability_Accommodation@McKesson.com (United States) or Accessibility@mckesson.ca (Canada). Resumes or CVs submitted to this email box will not be accepted.
#J-18808-Ljbffr
  • Columbus, Ohio, United States

Compétences linguistiques

  • English
Avis aux utilisateurs

Cette offre provient d’une plateforme partenaire de TieTalent. Cliquez sur « Postuler maintenant » pour soumettre votre candidature directement sur leur site.