Information Protection Senior Analyst

Job description

Conceptual Proactive Problem-Solver Strategic Technologically Savvy Visual Thinker <meta data-json="{"ModuleType":13,"ApplyButtonText":"Apply","JobDetailsAlign":0,"JobDetailsDate":0,"JobDetailsJobTypeId":1,"JobDetailsSelectedDate":"2026-11-06T20:32:58.845Z","JobDetailsJobDateFormat":0,"JobDetailsJobLabelId":"Job ID","JobDetailsJobDatePosting":"Date posted","JobDetailsDescriptionFormat":0,"ShowApplyLater":false,"ShowApplyMobile":true,"ShowApplyLaterMobile":false,"ShowApplyLaterWeb":false,"ApplyLaterText":"Apply Later","ApplyLaterAlign":0,"ApplyLaterSubject":"[[JOB_TITLE]] at [[COMPANY_NAME]]","PublishedCandidateCardPageId":null,"ReferrerPageId":null,"ReferrerPageButtonText":"","ShowSavedJobsIcon":false,"IconLabel":"Save for Later","OverrideCandidateCard":false,"ModulePageType":2,"ModulePageName":"AJD - Design 1","DisplayJobDateFormat":"MM/dd/yyyy","JobDetailsSelectedId":"JR0155318","ApplyUrl":"https://mckesson.wd3.myworkdayjobs.com/External_Careers/job/CAN-ON-Mississauga/Information-Protection-Senior-Analyst_JR0155318/apply","JobDescription":"\u003Cp style=\u0022text-align:left\u0022\u003EMcKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve \u2013 we care.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Cp style=\u0022text-align:left\u0022\u003EWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow\u2019s health today, we want to hear from you.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Ch1\u003E\u003Cb\u003EAbout the Role\u003C/b\u003E\u003C/h1\u003E\u003Cp\u003EMcKesson is seeking a Information Protection Senior Analyst to help safeguard enterprise data assets across Microsoft 365 and cloud environments. This role will lead the design, implementation, and optimization of information protection and data security controls, ensuring sensitive information is appropriately discovered, classified, protected, and governed.\u003C/p\u003E\u003Cp\u003EThe ideal candidate combines deep technical expertise in Microsoft Purview, cloud data security, compliance frameworks, and cybersecurity operations with the ability to influence security strategy and drive cross-functional collaboration. This role supports McKesson\u0027s commitment to protecting critical business and healthcare information while enabling secure business innovation\u003C/p\u003E\u003Cbr /\u003E\u003Ch1\u003E\u003Cb\u003EWhat You\u0027ll Do\u003C/b\u003E\u003C/h1\u003E\u003Cul\u003E\u003Cli\u003ELead enterprise-wide data protection initiatives using Microsoft Purview Information Protection, Data Loss Prevention (DLP), and data classification capabilities.\u003C/li\u003E\u003Cli\u003EDesign and implement security controls across Microsoft 365, SharePoint Online, OneDrive, Teams, Exchange Online, and approved SaaS platforms.\u003C/li\u003E\u003Cli\u003EDevelop and maintain data discovery programs, sensitive data inventories, and information governance processes.\u003C/li\u003E\u003Cli\u003ECreate, optimize, and manage data protection policies, labeling strategies, retention controls, and DLP monitoring.\u003C/li\u003E\u003Cli\u003ESupport regulatory and compliance requirements including HIPAA, HITRUST, GDPR, PCI-DSS, and SOX.\u003C/li\u003E\u003Cli\u003EConduct security assessments, risk analyses, and remediation activities related to data security and cloud services.\u003C/li\u003E\u003Cli\u003EDevelop automation, analytics, dashboards, and reporting to enhance operational efficiency and security visibility.\u003C/li\u003E\u003Cli\u003EPartner with security, compliance, legal, privacy, and technology teams to strengthen enterprise data protection capabilities.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch1\u003E\u003Cb\u003EBasic Requirements\u003C/b\u003E\u003C/h1\u003E\u003Cul\u003E\u003Cli\u003E\u003Cb\u003E7\u002B years of experience in cybersecurity, information security, cloud security, data protection, or related security disciplines.\u003C/b\u003E\u003C/li\u003E\u003Cli\u003EBachelor\u0027s degree in Cybersecurity, Information Security, Computer Science, Information Systems, or equivalent work experience.\u003C/li\u003E\u003Cli\u003EHands-on experience with Microsoft Purview Information Protection, Data Loss Prevention (DLP), sensitivity labels, and data classification technologies.\u003C/li\u003E\u003Cli\u003EExperience securing Microsoft 365 environments including SharePoint Online, OneDrive, Teams, and Exchange Online.\u003C/li\u003E\u003Cli\u003EExperience implementing and managing enterprise data protection and information governance programs.\u003C/li\u003E\u003Cli\u003EKnowledge of cloud security controls, security monitoring, risk management, and incident response practices.\u003C/li\u003E\u003Cli\u003EExperience supporting regulatory compliance requirements such as HIPAA, GDPR, PCI-DSS, HITRUST, or SOX.\u003C/li\u003E\u003Cli\u003EStrong analytical, problem-solving, stakeholder communication, and documentation skills.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch1\u003E\u003Cb\u003EPreferred Skills/Experience\u003C/b\u003E\u003C/h1\u003E\u003Cul\u003E\u003Cli\u003EExperience with Insider Risk Management, Information Governance, Data Lifecycle Management, and Records Management.\u003C/li\u003E\u003Cli\u003EExperience with Microsoft Defender, Microsoft Sentinel, or other security monitoring platforms.\u003C/li\u003E\u003Cli\u003EProficiency in scripting and automation using PowerShell, Python, KQL, or similar technologies.\u003C/li\u003E\u003Cli\u003EExperience building security metrics, dashboards, reporting frameworks, and executive-level presentations.\u003C/li\u003E\u003Cli\u003EKnowledge of Zero Trust security architecture and cloud security best practices.\u003C/li\u003E\u003Cli\u003EExperience evaluating and implementing emerging cybersecurity and data protection technologies.\u003C/li\u003E\u003Cli\u003ERelevant certifications such as SC-400, SC-300, CISSP, CCSP, CISM, or GIAC certifications.\u003C/li\u003E\u003Cli\u003EExperience mentoring analysts and leading cross-functional security initiatives.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u003Cbr /\u003E\u003Cb\u003ETravel / Work Environment / Physical Requirements\u003C/b\u003E\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EAbility to work effectively in a hybrid or remote environment while collaborating across multiple teams and time zones.\u003C/li\u003E\u003Cli\u003ELimited travel may be required based on business needs.\u003C/li\u003E\u003Cli\u003EAbility to perform standard computer-based work for extended periods.\u003Cbr /\u003E\u003Cbr /\u003E\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u003Cbr /\u003E\u003Cbr /\u003E\u003C/p\u003E\u003Cp\u003E\u003C/p\u003E\u003Cp\u003EWe are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. \u003Cspan\u003EThe pay range shown below is aligned with McKesson\u0027s pay philosophy, and pay will always be compliant with any applicable regulations.\u003C/span\u003E In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please\u00A0\u003Ca href=\u0022https://careers.mckesson.com/en/benefits\u0022 target=\u0022_blank\u0022\u003Eclick here.\u003C/a\u003E\u003C/p\u003E\u003Cp\u003E\u003C/p\u0