Job Description

Privacy Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Location: Atlanta, Georgia or Dallas, Texas (Preferred) Hybrid (Preferred)

Industry experience: Must have privacy experience working in a regulated industry

We are seeking a highly skilled and motivated Privacy Engineer to join our dynamic Global Privacy Office (GPO) compliance team at McKesson. This pivotal role will focus on enhancing and engineering technical data protection measures, with a strong emphasis on OneTrust knowledge and understanding of controls found within IT applications. As a Privacy Engineer, you will play a critical role in ensuring that our technical privacy practices align with McKesson's Privacy Principles, Cybersecurity program, global privacy laws, regulatory requirements, and industry standards.

Key Responsibilities:

• OneTrust Expertise: Leverage extensive knowledge of OneTrust to support the development, implementation, and maintenance of privacy management and compliance processes.
• Technical Privacy Controls: Coordinate with McKesson Technology, Business Unit technology teams, and others to design, implement, and monitor technical privacy controls into business processes to safeguard the processing of personal data, ensuring compliance with relevant data protection regulations and internal policies.
• Privacy Risk Management: Support McKesson's privacy risk management program through expanded use of OneTrust's privacy compliance modules.
• Cookie Consent Management: Collaborate with the GPO, Digital and Data Assets (DDA) team and web teams to scope, design, implement, and maintain McKesson's CCM program across the company's web domains.
• Training and Awareness: Develop and deliver periodic privacy training and awareness programs (e.g., privacy by design, etc.) to foster collaboration among Compliance & Ethics, McKesson Technology, and other risk-focused departments to promote a culture of privacy throughout the organization.
• Documentation and Reporting: Maintain thorough documentation of privacy practices and prepare regular reports (i.e. metrics/KPIs) for internal stakeholders and regulatory bodies.
• Regulatory Compliance: Stay informed about global privacy regulations and the technical standards contained within these regulations, such as HIPAA, PIPEDA, US state privacy laws, GDPR, AI, and others, to ensure McKesson's practices are compliant and up-to-date.
• Data Mapping and Lineage: Maintain and update documentation on McKesson's data flows across multiple key systems.

Critical Skills:

• Proven experience as a Privacy Engineer or in a similar role, with deep experience using the OneTrust GRC platform. Past experience in a healthcare organization is a plus.
• In-depth understanding of technical privacy controls and data protection frameworks. Specifically, this includes a familiarity with technical concepts such as data anonymization, pseudonymization, HIPAA de-identification methods, encryption, and coding/testing/debugging practices.
• Familiarity with data privacy regulations and standards, such as HIPAA, PIPEDA, GDPR, etc.
• Understanding and experience with data privacy risk assessments such as Privacy Impact Assessments, Data Protection Impact Assessments, and Transfer Impact Assessments.
• Knowledge of website coding standards and tools including HTML, CSS, and GTM.
• Familiarity with industry-leading compliance standards and frameworks, such as NIST CSF, NIST Privacy Framework, NIST 800-53, and ISO 27001.
• Strong analytical and problem-solving skills, with the ability to assess and mitigate privacy risks effectively and independently.
• Excellent communication and collaboration skills, with the ability to work with IT teams as well as other stakeholders.
• Proven ability to work with dispersed teams across multiple regulatory jurisdictions and locations, especially with technical teams (developers), non-technical teams (product owners), and legal and compliance teams.
• Demonstrated success as an independent contributor and self-starter.

Education:

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. Priority given to candidates with advanced degrees (e.g. Masters and above) and/or certifications (e.g., CIPT, CDPSE) in the relevant fields

Minimum Requirements:

• Degree or equivalent and typically requires 7+ years of relevant experience

Must be authorized to work in the US. Sponsorship is not available for this position.

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position $108,800 - $181,300

McKesson is an Equal Opportunity Employer. McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information.

Job Tags

Similar Jobs