Senior Healthcare Compliance Analyst

Job description

Conceptual Proactive Problem-Solver Strategic Technologically Savvy Visual Thinker <meta data-json="{"ModuleType":13,"ApplyButtonText":"Apply","JobDetailsAlign":0,"JobDetailsDate":0,"JobDetailsJobTypeId":1,"JobDetailsSelectedDate":"2026-10-09T12:31:55.836Z","JobDetailsJobDateFormat":0,"JobDetailsJobLabelId":"Job ID","JobDetailsJobDatePosting":"Date posted","JobDetailsDescriptionFormat":0,"ShowApplyLater":false,"ShowApplyMobile":true,"ShowApplyLaterMobile":false,"ShowApplyLaterWeb":false,"ApplyLaterText":"Apply Later","ApplyLaterAlign":0,"ApplyLaterSubject":"[[JOB_TITLE]] at [[COMPANY_NAME]]","PublishedCandidateCardPageId":null,"ReferrerPageId":null,"ReferrerPageButtonText":"","ShowSavedJobsIcon":false,"IconLabel":"Save for Later","OverrideCandidateCard":false,"ModulePageType":2,"ModulePageName":"AJD - Design 1","DisplayJobDateFormat":"MM/dd/yyyy","JobDetailsSelectedId":"JR0154346","ApplyUrl":"https://mckesson.wd3.myworkdayjobs.com/External_Careers/job/Cork/Senior-Healthcare-Compliance-Analyst_JR0154346/apply","JobDescription":"\u003Cp style=\u0022text-align:left\u0022\u003EMcKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve \u2013 we care.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Cp style=\u0022text-align:left\u0022\u003EWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow\u2019s health today, we want to hear from you.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Ch2\u003EPosition Summary\u003C/h2\u003E\u003Cbr /\u003E\u003Cp\u003EThe Senior Healthcare Compliance Analyst is responsible for leading and supporting healthcare regulatory compliance initiatives across the organization, ensuring the protection of electronic Protected Health Information (ePHI) and adherence to healthcare industry regulations and certifications.\u003C/p\u003E\u003Cp\u003EThis role serves as a subject matter expert for HIPAA Security Rule compliance, healthcare privacy requirements, HITRUST certification activities, and related healthcare regulatory obligations. The analyst will partner with Legal, Privacy, Technology, Business Units, and Cybersecurity teams to assess compliance, identify risks, validate control implementation, collect and evaluate evidence, coordinate remediation activities, and maintain ongoing audit readiness.\u003C/p\u003E\u003Cp\u003EThe position plays a key role in supporting the organization\u0027s HIPAA Security Program, healthcare risk assessment activities, continuous monitoring efforts, regulatory audits, and compliance assurance initiatives.\u003C/p\u003E\u003Cp\u003E\u003C/p\u003E\u003Ch1\u003EKey Responsibilities\u003C/h1\u003E\u003Cbr /\u003E\u003Ch3\u003EHIPAA Compliance \u0026 Risk Analysis\u003C/h3\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003ELead and support HIPAA Security Rule compliance activities across applications, systems, and business processes that create, receive, maintain, or transmit ePHI.\u003C/li\u003E\u003Cli\u003EConduct and facilitate HIPAA Security Assessments and Attestations for in-scope applications.\u003C/li\u003E\u003Cli\u003ESupport enterprise HIPAA Risk Analysis and Risk Management activities.\u003C/li\u003E\u003Cli\u003EValidate implementation and effectiveness of administrative, technical, and physical safeguards.\u003C/li\u003E\u003Cli\u003EIdentify compliance gaps and coordinate remediation efforts with business and technology stakeholders.\u003C/li\u003E\u003Cli\u003EProvide guidance on HIPAA Security Rule requirements and compliance obligations.\u003C/li\u003E\u003Cli\u003ESupport the maintenance of audit-ready evidence demonstrating compliance with HIPAA requirements.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch3\u003EHealthcare Regulatory Compliance\u003C/h3\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003ESupport compliance activities across healthcare and privacy regulations including:\u003Cul\u003E\u003Cli\u003EHIPAA Security Rule\u003C/li\u003E\u003Cli\u003EHIPAA Privacy Rule\u003C/li\u003E\u003Cli\u003EHITECH\u003C/li\u003E\u003Cli\u003EHITRUST CSF\u003C/li\u003E\u003Cli\u003EPIPEDA\u003C/li\u003E\u003Cli\u003EGDPR\u003C/li\u003E\u003Cli\u003ECMMC\u003C/li\u003E\u003C/ul\u003E\u003C/li\u003E\u003Cli\u003EMonitor evolving healthcare regulatory requirements and assess organizational impact.\u003C/li\u003E\u003Cli\u003ESupport implementation of regulatory compliance initiatives.\u003C/li\u003E\u003Cli\u003EMaintain documentation demonstrating regulatory compliance and control effectiveness.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch3\u003EHITRUST \u0026 Healthcare Certification Programs\u003C/h3\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003ESupport HITRUST certification and validated assessment activities.\u003C/li\u003E\u003Cli\u003EPerform control assessments, testing, and evidence reviews against HITRUST CSF requirements.\u003C/li\u003E\u003Cli\u003ECoordinate remediation activities for identified HITRUST control deficiencies.\u003C/li\u003E\u003Cli\u003EMaintain supporting documentation required for assessments, external reviews, and certification activities.\u003C/li\u003E\u003Cli\u003EAssist with continuous monitoring activities to sustain certification of readiness between assessment cycles.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch3\u003ECompliance Assessments \u0026 Assurance\u003C/h3\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003EConduct healthcare-focused risk assessments and compliance reviews.\u003C/li\u003E\u003Cli\u003EEvaluate security and privacy controls against regulatory and industry requirements.\u003C/li\u003E\u003Cli\u003EReview evidence to validate control implementation and operating effectiveness.\u003C/li\u003E\u003Cli\u003ETrack remediation plans and ensure timely closure of identified gaps.\u003C/li\u003E\u003Cli\u003ESupport internal and external audits, regulatory reviews, and customer compliance requests.\u003C/li\u003E\u003Cli\u003EDevelop compliance reports, metrics, dashboards, and executive-level status updates.\u003C/li\u003E\u003Cli\u003E\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPartner with Privacy \u0026 Data Protection\u003C/h3\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003EPartner with Privacy teams to support identification and assessment of systems containing PHI or ePHI.\u003C/li\u003E\u003Cli\u003EEvaluate controls supporting the confidentiality, integrity, and availability of healthcare information.\u003C/li\u003E\u003Cli\u003EAssist with privacy and data protection compliance initiatives.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch3\u003EHITRUST \u0026 Healthcare Certification Programs\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ESupport HITRUST certification and validated assessment activities.\u003C/li\u003E\u003Cli\u003EPerform control assessments, testing, and evidence reviews against HITRUST CSF requirements.\u003C/li\u003E\u003Cli\u003ECoordinate remediation activities for identified HITRUST control deficiencies.\u003C/li\u003E\u003Cli\u003EMaintain supporting documentation required for assessments, external reviews, and certification activities.\u003C/li\u003E\u003Cli\u003EAssist with continuous monitoring activities to sustain certification of readiness between assessment cycles.\u003C/li\u003E\u003C/ul\u003E\u003Cbr /\u003E\u003Ch3\u003EStakeholder Engagement\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with Privacy, Legal, Cybersecurity, Technology, Risk Management, Audit, and Business teams.\u003C/li\u003E\u003Cli\u003EProvide healthcare compliance expertise for projec