Sr. Director, Infrastructure Automation & Compliance

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Position Summary

The Senior Director of Audit, Compliance & Automation (M5) is a senior enterprise leader responsible for driving end-to-end audit readiness, compliance execution, and large-scale automation of control processes across infrastructure platforms and services.

This role provides strategic direction, governance, and operational leadership to ensure regulatory adherence, audit excellence, and continuous control optimization. It integratesaudit, GRC frameworks, and automation engineeringto transform compliance from a reactive process into a proactive, scalable, and technology-enabled capability.

Operating at the intersection ofcompliance, infrastructure operations, and automation, the role partners with executive leadership, audit committees, and platform teams to ensure enterprise-wide control effectiveness, risk transparency, and measurable improvements in audit outcomes.

Key Responsibilities

1. Enterprise Audit & Compliance Leadership

Lead enterprise-wide audit readiness strategy across data center, infrastructure, and platform environments.

Own relationship with internal audit, external auditors, and regulatory bodies.

Oversee audit lifecycle (planning, walkthroughs, evidence collection, remediation tracking).

Ensure consistent execution of control frameworks (e.g., SOX ITGC, security, operational controls).

Drive closure of audit findings, ensuring sustainable remediation and root-cause elimination.

2. Automation of Controls & Audit Processes

Define and execute a strategy toautomate audit evidence collection, control monitoring, and certification workflows.

Partner with engineering and platform teams to embedautomated controls into infrastructure systems.

Lead adoption of tools (e.g., ServiceNow GRC, workflow platforms) to digitize compliance processes.

Drive continuous control monitoring (CCM) and real-time risk visibility.

Eliminate manual audit processes through intelligent automation and integration.

3. Governance, Risk & Controls Strategy

Design and implement enterprise GRC frameworks integrated with infrastructure transformation initiatives (DDC exit, cloud migration,coloconsolidation).

Establish standardized control libraries, policies, and governance models across platforms.

Lead risk identification, assessment, and mitigation strategies for infrastructure services.

Provide executive dashboards andreportingon compliance posture, risk exposure, and audit health.

4. Operational Integration with Infrastructure Teams

Embed compliance and audit requirements intorunandbuildoperating models.

Ensure controls are integrated intoday-2 operations, provisioning workflows, and platform engineering standards.

Partner with infrastructure leaders to align audit compliance with transformation initiatives (cloud, EUC, data center exits).

Drive accountability for control ownership across engineering and operations teams.

5. Executive Advisory & Stakeholder Engagement

Serve as a trusted advisor toEITP Infrastructure VPand senior leadership on audit risk, compliance posture, and regulatory exposure.

Prepare executive briefings for audit committees andSteerCos.

Represent Infrastructure in enterprise compliance and audit forums.

Translate audit and control requirements into business-aligned strategies.

6. Organizational Leadership & Talent Development :

Build a high-performing organization blendingaudit expertise, compliance professionals, and automation engineers.

Develop talent pipelines and succession plans for critical governance and automation roles.

Foster a culture of accountability, transparency, and continuous improvement.

Minimum Requirements:

Degree or equivalent experience. Typically requires 13+ years of professional experience and 6+ years of diversified leadership, planning, communication, organization, and people motivation skills (or equivalent experience).

Critical Skills:

8+ years of experience inaudit, compliance, risk management, or infrastructure governance.

8+ years of leadership experience managing enterprise-scale teams and programs.

Proven experience leading large-scale audit programs (SOX, ITGC, regulatory audits).

Experience driving automation in compliance or operational processes.

Background in enterprise infrastructure, cloud, or data center environments strongly preferred.

Technical & Functional Expertise:

IT General Controls (ITGC) / SOX compliance

Audit lifecycle, walkthroughs, evidence management

Risk management frameworks and control design

ServiceNow GRC or similar platforms

Workflow automation and reporting tools

Infrastructure environments (compute, network, storage, DC operations)

Strong understanding of integrating compliance into engineering and operational processes

Leadership Competencies:

Strategic thinking and enterprise influence

Executive communication and stakeholder management

Ability to drive transformation across siloed teams

Strong governance and decision-making discipline

Data-driven mindset with focus on measurable outcomes

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson,

Our Base Pay Range for this position

$151,200 - $201,600

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.

Join us at McKesson!

Benefits

Coverage you can rely on

Medical, Dental, and Vision

Health Spending Accounts

Flexible Spending Accounts

Benefits that go beyond your base pay

401(k) (U.S.)

Pension (Canada)

Employee Stock Purchase Plan

Support for total well-being

Mental Health Programs

Flexible Schedules

Paid Time Off

Wellness Program

Education Reimbursement

Volunteer Opportunities

Flexible Work Environment

A culture powered by belonging

By fostering a culture of belonging, we advance our goal of being the best place to work in healthcare - connecting the right talent to the right roles to solve our most critical challenges.