Compliance and Privacy Manager - SCRI

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. Title: Compliance & Privacy Manager - SCRI Locations: Dallas, Texas or Nashville, Tennessee (Required) Hybrid/Onsite/Remote: Hybrid position Position Description The Compliance and Privacy Manager is responsible for executing and monitoring the effectiveness of SCRI's privacy program in alignment with McKesson enterprise policies and applicable federal and state laws. The role focuses on privacy risk management, monitoring, and incident response within the SCRI research and clinical data environment. This role reports to the Senior Director, Privacy Operations, Oncology and Multi-Specialty, within McKesson's General Counsel Organization. The position operates with moderate autonomy and exercises professional judgment while partnering closely with Legal, Information Security, IT, and operational stakeholders. Key Responsibilities Execute privacy and compliance risk assessments across SCRI data flows and research activities, contributing to risk-based monitoring and workplans. Implement and monitor privacy and compliance controls, policies, and procedures within SCRI to meet regulatory, contractual, and McKesson requirements. Lead privacy incident investigations for SCRI, including documentation, root cause analysis, remediation actions, and coordination with enterprise partners. Respond to privacy-related inquiries, concerns, and complaints, escalating issues as appropriate. Conduct privacy audits and targeted monitoring activities based on identified risks. Partner with Information Security to align SCRI privacy practices with security controls and incident response processes. Drive ongoing compliance monitoring activities that support SCRI business objectives and research operations. Deliver privacy and data governance training tailored to SCRI workforce roles and data use cases. Monitor adherence to approved privacy and data governance documentation and standards. Maintain effective working relationships with Internal Audit, Legal, HR, IT, and other enterprise partners. Support additional privacy and data governance initiatives as assigned. Minimum Requirements 4 or more years of experience in healthcare privacy, compliance, audit, or a related field. Required Skills and Experience Working knowledge of healthcare privacy and compliance programs, with emphasis on HIPAA and research-related data use. Familiarity with federal and state privacy regulations applicable to healthcare providers and research organizations. Be capable of conducting workloads and projects in a self‑directed manner, with minimal oversight, while delivering superior results in a timely manner. Demonstrate ability to communicate effectively with a broad spectrum of business segment personnel and senior management. Possess effective written and verbal communication skills as demonstrated by the ability to articulate ideas, thoughts, and information in a logical manner and sequence to summarize issues clearly and succinctly. Ability to independently assess risk and apply sound professional judgment within established frameworks. Strong written and verbal communication skills, including the ability to present issues clearly to business and legal partners. Demonstrated ability to collaborate across legal, technical, and operational teams. Strong analytical and organizational skills, with attention to documentation and follow‑through. Preferred Qualifications Experience supporting healthcare research, clinical trials, or oncology data environments. Professional certifications such as CHC, CHPC, or CIPP. Education Bachelor's degree Travel Limited travel. Travel to office locations is not a regular expectation. Must be authorized to work in the US. Sponsorship is not available for this position. We are proud to offer a competitive compensation package as part of our Total Rewards. This is determined by several factors, including performance, experience, skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long‑term incentive opportunities may be offered. Our Base Pay Range for this position $82,700 – $137,900 McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including those with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to View email address on click.appcast.io or View email address on click.appcast.io. Resumes or CVs submitted to these email boxes will not be accepted. Join us at McKesson! #J-18808-Ljbffr