Job Details

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

About The Job

The Business Continuity Leader at CoverMyMeds (CMM) helps ensure CMM’s readiness for unexpected disruption to its operations. This includes taking a risk-based approach to prioritizing the creation, testing and review of business continuity (and related) plans. It encompasses known and unknown threats and the assessment of technology continuity and non-technical business continuity scenarios (i.e. fire, natural disasters, workforce, etc.) This position is based in Columbus, OH with an expectation of working onsite a significant percentage of time. The ideal candidate will have a deep understanding of risk management and continuity planning within a complex healthcare environment.

Primary responsibilities of the Business Continuity Leader include:

• Engage with corporate and business unit leaders to understand priorities, concerns, and business continuity risks, and incorporate them into risk-based resilience efforts.

• Work closely with resiliency departments such as Disaster Recovery, physical security, information security, technical teams, and incident response during disruptions to the business and to continually improve CMM’s resilience posture.

• Work with internal and external audit personnel and teams to support governance, risk, and compliance requirements.

• Be a strategic partner to control owners, second line of defense, and business leaders.

• Partner with IT Control Owners to resolve control failures identified through risk assessments, internal/external audits, or information security assessments.

• Work with various response and recovery teams across the enterprise during actual incidents and events.

• Ensure alignment with McKesson Technology policies, standards, and direction.

• Technology-related business continuity coordination, in concert with technology disaster recovery personnel, processes and assets, to include:

  • Driving the creation, annual review, and awareness of assets including business impact assessments (BIAs), application impact assessments (AIAs), application contingency plans (ACPs), business continuity plans (BCPs), crisis management plans (CMPs), and emergency response plans (ERPs)

  • Coordinate, execute and formally document the necessary business continuity exercises to comply with regulatory and customer obligations

  • Assist with technology documentation efforts to accurately represent the CMM technology environment in the appropriate source “systems of truth” including LeanIX, ServiceNow, and OneTrust

• “Non-Technology”-related business continuity coordination, in concert with CMM Campus Operations and enterprise teams

  • Work with various teams and leaders involved in employee safety, security, emergency management and business resilience

  • Support crisis management and emergency response planning, coordination and implementation

• Represent the Business Continuity program to internal and external customers, including CMM customers, as a subject matter expert.

• Assist with security assessments and IT audits, responding to questionnaires as needed.

• Manage metrics and reporting for the business continuity and resiliency program.

Minimum Requirements: Degree or equivalent and typically requires 7+ years of relevant experience..

Critical Skills:

• 7+ years in Business Continuity, Business Operations, Program Management, IT Audit, Information Technology, Information Security Services, or Risk Management.

• 7+ years of implementing and managing business continuity and resiliency programs.

• Strong communication and interpersonal skills to build and maintain ongoing business relationships at all levels within an organization.

• Strong ability to influence or negotiate with stakeholders dealing with competing priorities.

• Solution-oriented mindset, with the ability to problem solve and exercise good professional judgment.

• Strong ability and experience in formal policy and standard documentation creation and management.

• Experience in IT risk assessment and IT audit.

• Experience with business continuity maturity assessments.

• Experience with compliance regulations, frameworks, and standards, with in-depth knowledge of SOX, SOC2, HIPAA, and NIST preferred.

• Knowledge of the healthcare industry and healthcare IT.

• Experience managing complex and cross functional projects or programs.

Preferred Skills:

PMP, CISM, CBCP.CRISC, CISA and/or CISSP a plus.

Education: 4-year degree in business, finance, or information security preferred

Candidate must be authorized to work in the U.S, now or in the future, without the support from McKesson.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.

Our Base Pay Range for this position

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.

Join us at McKesson!