Principal M&A Analyst Cyber

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

McKesson is seeking a Principal M&A Analyst Cyber to support cybersecurity due diligence and risk assessment activities across mergers, acquisitions, divestitures, and strategic investments. This role serves as a trusted advisor to business and technology stakeholders, helping evaluate target-company cybersecurity programs, identify risks, document findings, and support integration planning.

The successful candidate will partner with cybersecurity, legal, compliance, technology, and business teams to assess security posture, recommend remediation strategies, and help protect enterprise value throughout the transaction lifecycle. This role is ideal for a cybersecurity professional who combines strong analytical skills, risk management expertise, and collaborative leadership.

• Lead cybersecurity due diligence assessments for mergers, acquisitions, and strategic transactions.
• Evaluate target company security controls, governance practices, regulatory compliance, and cyber risks.
• Document cybersecurity findings, risk ratings, and remediation requirements for stakeholders and executive audiences.
• Coordinate with security, infrastructure, application, privacy, and compliance teams on integration risk assessments.
• Assess third-party, cloud, identity, vulnerability, and data protection risks associated with acquisition targets.
• Provide actionable recommendations that help inform transaction decisions and post-close integration planning.
• Collaborate with cross-functional stakeholders to ensure cybersecurity risks are tracked, mitigated, and communicated effectively.

• Own the cybersecurity contribution to the transaction cost model, including preliminary one-time and recurring cost estimates, assumptions, contingencies, and key estimation risks.
• Identify potential Day 1, initial hardening, Employee Day 1, and longer-term integration requirements to inform transaction decisions and subsequent planning.
• Define the recommended cybersecurity integration principles, priorities, planning guardrails, and critical dependencies arising from due diligence.
• Partner with Finance, Cybersecurity Service Areas, Infrastructure, Enterprise Applications, Enterprise Architecture, and MT M&A leadership to ensure cybersecurity risk and cost implications are reflected consistently in deal materials.

• Translate complex cybersecurity findings into clear business implications, including potential deal impact, risk acceptance requirements, cost exposure, timing constraints, and integration complexity.
• Identify, prioritize, and elevate material or potentially deal-altering cybersecurity risks, with practical recommendations and clearly articulated trade-offs.
• Advise transaction leaders on cybersecurity considerations affecting valuation, deal structure, contractual protections, closing conditions, transition services, and investment requirements.
• Deliver concise, decision-oriented cybersecurity recommendations to executive leadership.
• Serve as the senior cybersecurity diligence advisor in…