Sr. Director, Infrastructure Automation & Compliance

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

The Senior Director, Infrastructure Compliance & Automation is responsible for leading enterprise Infrastructure compliance, vulnerability remediation enablement, automation, and emerging infrastructure automation technologies.

This role provides strategic and operational leadership across infrastructure controls, regulatory and audit compliance, vulnerability remediation, patching automation, and infrastructure automation platforms. The Senior Director partners closely with Cyber Security, Internal Audit, External Audit, Infrastructure Engineering and Operations teams, Managed Service Providers (MSPs), and other technology organizations to ensure enterprise infrastructure services operate in accordance with established security, compliance, and control requirements.

The role leads the Infrastructure organization's response to evolving vulnerability management and patching requirements, with a focus on increasing automation, improving remediation velocity, reducing operational risk, and enabling consistent execution across the infrastructure environment.

The Senior Director also leads Infrastructure compliance activities supporting SOX, SOC 1, SOC 2, and other applicable enterprise controls and audits, ensuring controls are effectively implemented, evidence is complete and timely, deficiencies are remediated, and Infrastructure teams remain audit-ready.

In addition, this leader owns the Infrastructure automation strategy and capabilities, including Ansible and emerging AI-enabled infrastructure platforms, with responsibility for expanding automation across provisioning, configuration, patching, compliance, lifecycle management, and infrastructure operations

Key Responsibilities:

Infrastructure Compliance & Controls:

• Lead Infrastructure compliance and controls activities across enterprise compute, storage, backup, database, operating system, virtualization, data center, and related infrastructure services.
• Ensure Infrastructure teams effectively implement and maintain required enterprise security, operational, and regulatory controls.
• Lead Infrastructure activities supporting SOX, SOC 1, SOC 2, and other internal and external audits.
• Establish processes to ensure control evidence is accurate, complete, timely, and consistently maintained.
• Partner with Internal Audit, External Audit, Cyber Security, Risk, and Infrastructure leadership throughout control assessments and audits.
• Coordinate remediation of Infrastructure control deficiencies, audit findings, and identified compliance gaps.
• Translate new or changing enterprise controls into actionable Infrastructure requirements and ensure successful implementation across impacted technology teams.
• Establish reporting and governance mechanisms that provide leadership visibility into Infrastructure compliance posture, control effectiveness, audit readiness, and remediation activities.
• Promote continuous audit readiness rather than point-in-time preparation for individual audits.

Vulnerability & Patch Management Enablement:

• Lead Infrastructure vulnerability remediation enablement in partnership with Cyber Security, Infrastructure Engineering and Operations teams, and MSP partners.
• Establish prioritization, and escalation processes supporting timely remediation of infrastructure vulnerabilities.
• Drive remediation of operating system, platform, and third-party software vulnerabilities across the enterprise infrastructure environment.
• Partner with Cyber Security to translate vulnerability management requirements into actionable Infrastructure remediation priorities.
• Drive increased automation of patch deployment and vulnerability remediation across supported infrastructure platforms.
• Partner with MSP providers responsible for operational patching activities to ensure execution aligns with enterprise security requirements, service-level expectations, and remediation timelines.
• Identify systemic barriers to vulnerability remediation and work across Engineering, Operations, Cyber Security, application teams, and technology partners to resolve them.
• Establish metrics and executive reporting for vulnerability backlog, remediation performance, patch compliance, exceptions, aging, and risk.
• Drive continuous improvement in patching coverage, remediation velocity, automation, and operational effectiveness.

Infrastructure Automation:

• Define and lead the Infrastructure automation strategy and roadmap.
• Own and advance enterprise Infrastructure automation capabilities, including Ansible Automation Platform and related automation technologies.
• Expand automation across server provisioning, configuration management, patching, compliance, vulnerability remediation, lifecycle management, infrastructure operations, and service management processes.
• Partner with Infrastructure Engineering teams to identify high-value automation opportunities that improve reliability, security, speed, and operational efficiency.
• Establish automation standards, reusable capabilities, governance, and engineering practices that enable consistent adoption across Infrastructure.
• Reduce manual operational activities and improve service delivery through automation and orchestration.
• Establish metrics demonstrating automation adoption, operational efficiencies, risk reduction, and measurable business outcomes.

AI & Emerging Infrastructure Automation:

· Evaluate emerging AI-enabled infrastructure management and automation capabilities applicable to enterprise Infrastructure.

· Develop the roadmap for responsible adoption of AI capabilities that improve infrastructure operations, automation, compliance, vulnerability remediation, and service reliability.

· Partner with enterprise architecture, Cyber Security, Cloud, Data and AI teams, and other technology organizations to ensure emerging Infrastructure AI capabilities align with enterprise standards and governance.

· Identify practical use cases where AI and intelligent automation can reduce manual effort, accelerate issue identification and remediation, and improve operational decision-making.

· Ensure emerging automation capabilities are introduced with appropriate security, controls, governance, and operational oversight.

Leadership & Organizational Development:

• Build and lead a high-performing organization responsible for Infrastructure compliance, controls, vulnerability remediation enablement, and automation.
• Establish clear accountability, priorities, performance expectations, and career development opportunities for team members.
• Develop technical and leadership capabilities across the organization.
• Promote a culture of accountability, automation, continuous improvement, collaboration, and risk awareness.

Minimum Job Qualifications (Knowledge, Skills, & Abilities):

Education/Training –

• Bachelor’s degree in Information Technology, Computer Science, Business Administration, or related field; advanced degree or professional certifications in related areas preferred.

Specialized Knowledge/Skills –

• 10+ years of progressive experience in enterprise Infrastructure, technology operations, automation, cyber security, risk, compliance, or related disciplines.
• Strong understanding of enterprise Infrastructure technologies including compute, operating systems, storage, backup, databases, virtualization, data centers, cloud infrastructure, and related technology services.
• Experience leading teams responsible for infrastructure operations, automation, compliance, controls, vulnerability management, or related technology capabilities.
• Demonstrated experience supporting SOX, SOC, internal audit, external audit, or comparable technology control environments.
• Experience with enterprise vulnerability and patch management programs.
• Experience operating in an outsourced or managed services environment and holding service providers accountable for operational outcomes.
• Experience with enterprise automation platforms such as Ansible Automation Platform and related orchestration technologies.
• Understanding of emerging AI and intelligent automation capabilities applicable to Infrastructure operations.
• Strong analytical, executive communication, presentation, and stakeholder management skills.
• Strong knowledge of ITIL / IT Service Management practices (incident, problem, change, service level management).

• Working Conditions:
  • Traditional office environment.
  • Hybrid work type
  • Physical Requirements (Lifting, standing, etc.)
  • Large percent of time performing computer based work is required.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.

Our Base Pay Range for this position

$151,200 - $201,600

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) Disability_Accommodation@McKesson.com or (Canada) Accessibility@mckesson.ca. Resumes or CVs submitted to this email box will not be accepted.

Join us at McKesson!

About Us

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.