Détails du poste

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Job Summary

The Sr. Privacy and Governance Specialist, reporting to the Sr. Director of Privacy & Compliance, is crucial in embedding governance frameworks across McKesson. By offering expert guidance on privacy and data management, the Specialist ensures alignment with governance standards and implements future-ready solutions. This role manages risks through the oversight of the Privacy Incident Management Program and conducting thorough Privacy Impact Assessments, fostering a culture of compliance. This role provides comprehensive training and proactive breach investigation.

Collaboration with corporate groups, external vendors, and consultants is key, requiring leadership and project management skills. The Specialist must prioritize effectively, maintaining confidentiality and understanding the legal context of their work, while demonstrating integrity and supporting strategic initiatives through robust stakeholder communications.

Specific Responsibilities

• Analyze the evaluation, governance and documentation of privacy risks for Privacy Impact Assessments across all McKesson lines of business.
• Work with stakeholders to develop and deliver privacy training for employees.
• Lead and participate in project teams as the privacy subject matter expert, providing advice on the design of new initiatives in accordance with privacy policies and procedures, relevant privacy legislation, contractual obligations, and privacy best practices
• Establish audit practices across the organization and conduct regular audits to verify adherence to privacy policies and procedures.
• Update relevant policies and procedures in accordance with relevant privacy legislation, agreement(s), obligations, and privacy best practices
• Coordinate and conduct privacy breach investigations and identify the appropriate mitigating strategies and enterprise level recommendations
• Support data rights requests
• Conduct privacy impact assessments on new systems, programs, and complex initiatives
• Conduct research and provide analysis on privacy-related issues, as required
• Support ongoing review of existing privacy programs and establish ideal future state in consultation with internal leaders and external consultant(s) as needed
• Provide support on data management process implementation and sustainment activities to ensure stakeholder awareness and adoption of data governance in work including, but not limited to, development of policies, business tools and end-use procedure documentation.
• Monitor and report on data management requirements, impacts and resolution status.
• Conduct needs assessments, identifies gaps and provides suggestions to improve and streamline data management processes based on operational insights.
• Support the creation of stakeholder communications in support of data management process implementation.
• Act as an independent review body to ensure governance issues are appropriately evaluated, investigated, and resolved.
• Oversee, plan, and perform business process governance and privacy monitoring activities, ensuring standards are consistently applied.
• Design, implement, and maintain a comprehensive set of privacy and governance metrics to measure the effectiveness of these programs. Regularly review and report these metrics to identify areas for improvement and ensure alignment with organizational goals.
• Support the assessment, root cause analysis, and formulating proposed solutions/remediation strategies to improve data quality.
• Collaborate with other departments to identify and guide privacy and governance issues to appropriate channels for investigation and resolution, consulting with the Legal Department as needed.
• Provide support as needed on data strategy work, ensuring alignment with privacy and governance objectives and contributing to the development of data-driven insights for strategic decision-making.
• Stay updated with industry trends, and changes in laws and regulations impacting governance and privacy programs.

General Responsibilities

• Build effective relationships with stakeholders and ensures ongoing alignment.
• Support development and execution of strategic initiatives.
• Work independently on a range of complex tasks.
• Develop solutions and makes recommendations based on an understanding of the business strategy and stakeholder needs.
• Act as the subject matter expert for privacy and governance risks across the organization.
• Develop and maintains Standard Operating Procedures and business processes, ensuring they meet privacy and governance standards; implement controls to ensure compliance
• Support or facilitate regulatory or customer inspections across Privacy, and Governance.

Minimum Qualifications

• A Bachelor’s degree or equivalent experience is required.
• A minimum of 7 years’ experience in privacy and data governance roles.

Key Competencies

• Strong knowledge of privacy legislation, such as PIPEDA; CIPP/C designation preferred.
• Proven leadership and project management skills with the ability to manage cross-functional teams.
• Excellent analytical skills for conducting privacy impact assessments and risk evaluations.
• Demonstrated ability to prioritize tasks effectively and maintain confidentiality in handling sensitive information.
• Exceptional communication skills for stakeholder engagement and training facilitation.
• Bilingual proficiency in English and French is considered an asset.
• Strong commitment to ethical standards and integrity in all aspects of governance and privacy compliance.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.

Our Base Pay Range for this position

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.

Join us at McKesson!