Execute privacy and compliance risk assessments across SCRI data flows and research activities, contributing to risk-based monitoring and workplans.
Implement and monitor privacy and compliance controls, policies, and procedures within SCRI to meet regulatory, contractual, and McKesson requirements.
Lead privacy incident investigations for SCRI, including documentation, root cause analysis, remediation actions, and coordination with enterprise partners.
Respond to privacy-related inquiries, concerns, and complaints, escalating issues as appropriate.
Conduct privacy audits and targeted monitoring activities based on identified risks.
Partner with Information Security to align SCRI privacy practices with security controls and incident response processes.
Drive ongoing compliance monitoring activities that support SCRI business objectives and research operations.
Deliver privacy and data governance training tailored to SCRI workforce roles and data use cases.
Monitor adherence to approved privacy and data governance documentation and standards.
Maintain effective working relationships with Internal Audit, Legal, HR, IT, and other enterprise partners.
Support additional privacy and data governance initiatives as assigned.
Minimum Requirements
4 or more years of experience in healthcare privacy, compliance, audit, or a related field.
Required Skills and Experience
Working knowledge of healthcare privacy and compliance programs, with emphasis on HIPAA and research-related data use.
Familiarity with federal and state privacy regulations applicable to healthcare providers and research organizations.
Be capable of conducting workloads and projects in a self-directed manner, with minimal oversight, while delivering superior results in a timely manner.
Demonstrate ability to communicate effectively with a broad spectrum of business segment personnel and senior management.
Possess effective written and verbal communication skills as demonstrated by the ability to articulate ideas, thoughts, and information in a logical manner and sequence to summarize issues clearly and succinctly.
Ability to independently assess risk and apply sound professional judgment within established frameworks.
Strong written and verbal communication skills, including the ability to present issues clearly to business and legal partners.
Demonstrated ability to collaborate across legal, technical, and operational teams.
Strong analytical and organizational skills, with attention to documentation and follow-through.
Requirements
Experience supporting healthcare research, clinical trials, or oncology data environments.
Professional certifications such as CHC, CHPC, or CIPP.
Education
Bachelor's degree
Travel
Limited travel. Travel to office locations is not a regular expectation.
Must be authorized to work in the US. Sponsorship is not available for this position.
Our Base Pay Range for this position
$82,700 - $137,900
McKesson
Benefits
Health insuranceRemote work optionsEquity / stock optionsPerformance bonus
Additional Information
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.
Title: Compliance & Privacy Manager - SCRI
Locations: Dallas, Texas or Nashville, Tennessee (Required)
Hybrid/Onsite/Remote: Hybrid position
Position Description
The Compliance and Privacy Manager is responsible for executing and monitoring the effectiveness of SCRI's privacy program in alignment with McKesson enterprise policies and applicable federal and state laws. The role focuses on privacy risk management, monitoring, and incident response within the SCRI research and clinical data environment.
This role reports to the Senior Director, Privacy Operations, Oncology and Multi-Specialty, within McKesson's General Counsel Organization. The position operates with moderate autonomy and exercises professional judgment while partnering closely with Legal, Information Security, IT, and operational stakeholders.
Mckesson · TX, Irving