Director, Information Protection

Job description

Conceptual Proactive Problem-Solver Strategic Technologically Savvy Visual Thinker <meta data-json="{"ModuleType":13,"ApplyButtonText":"Apply","JobDetailsAlign":0,"JobDetailsDate":0,"JobDetailsJobTypeId":1,"JobDetailsSelectedDate":"2026-10-28T12:30:18.128Z","JobDetailsJobDateFormat":0,"JobDetailsJobLabelId":"Job ID","JobDetailsJobDatePosting":"Date posted","JobDetailsDescriptionFormat":0,"ShowApplyLater":false,"ShowApplyMobile":true,"ShowApplyLaterMobile":false,"ShowApplyLaterWeb":false,"ApplyLaterText":"Apply Later","ApplyLaterAlign":0,"ApplyLaterSubject":"[[JOB_TITLE]] at [[COMPANY_NAME]]","PublishedCandidateCardPageId":null,"ReferrerPageId":null,"ReferrerPageButtonText":"","ShowSavedJobsIcon":false,"IconLabel":"Save for Later","OverrideCandidateCard":false,"ModulePageType":2,"ModulePageName":"AJD - Design 1","DisplayJobDateFormat":"MM/dd/yyyy","JobDetailsSelectedId":"JR0152924","ApplyUrl":"https://mckesson.wd3.myworkdayjobs.com/External_Careers/job/Cork/Director--Information-Protection_JR0152924/apply","JobDescription":"\u003Cp style=\u0022text-align:left\u0022\u003EMcKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve \u2013 we care.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Cp style=\u0022text-align:left\u0022\u003EWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow\u2019s health today, we want to hear from you.\u003C/p\u003E\u003Cp style=\u0022text-align:inherit\u0022\u003E\u003C/p\u003E\u003Cp\u003E\u003Cb\u003EPosition Summary (Purpose of job):\u00A0\u003C/b\u003E\u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003EMcKesson is seeking a strategic and results-oriented Director, Information Protection to lead enterprise-wide information protection initiatives that safeguard critical business and healthcare data. \u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003EThis leader will define and execute McKesson\u0027s data protection strategy, ensuring sensitive information remains secure across cloud, endpoint, email, and collaboration environments while supporting business productivity and regulatory compliance. \u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003EThe Director will partner across Cybersecurity, Privacy, Legal, Compliance, IT, and business teams to mature data protection capabilities, strengthen governance, and reduce enterprise risk. \u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003EThis role requires a proven leader who can translate complex compliance requirements into scalable technical controls and drive measurable security outcomes. \u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003EBased on leadership expectations defined for the Director (M4) level. \u003C/p\u003E\u003Cbr /\u003E\u003Cp\u003E\u003Cb\u003EWhat You\u0027ll Do \u003C/b\u003E\u003C/p\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003EDevelop and execute enterprise-wide data protection and DLP strategies aligned with business objectives and security priorities. \u003C/li\u003E\u003Cli\u003EDesign, implement, and scale DLP programs across cloud, endpoint, email, and collaboration platforms to reduce data exposure risk while maintaining a positive user experience.\u003C/li\u003E\u003Cli\u003EEstablish and oversee data classification, retention, encryption, and information governance programs spanning the full data lifecycle.\u003C/li\u003E\u003Cli\u003ETranslate regulatory requirements, including HIPAA and protection of PHI/PII, into sustainable security controls, policies, and governance frameworks. \u003C/li\u003E\u003Cli\u003ELead cross-functional initiatives with Cybersecurity, Privacy, Legal, Compliance, IT, and business stakeholders to drive adoption and operational maturity. \u003C/li\u003E\u003Cli\u003EDefine governance standards, performance metrics, risk indicators, and compliance reporting for data protection programs.\u003C/li\u003E\u003Cli\u003EDrive continuous improvement through analytics, automation, process optimization, and emerging security technologies. \u003C/li\u003E\u003Cli\u003ELead organizational planning, budget management, vendor relationships, talent development, and succession planning for multiple teams. \u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u003Cbr /\u003E\u003Cbr /\u003E\u003C/p\u003E\u003Cp\u003E\u003Cb\u003EBasic Requirements\u003C/b\u003E\u003C/p\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003E12\u002B years of professional experience, including 4\u002B years of people leadership experience leading enterprise-scale cybersecurity, data protection, information security, or governance programs.\u003C/li\u003E\u003Cli\u003EProven experience designing and scaling DLP programs across cloud, endpoint, email, and collaboration environments. \u003C/li\u003E\u003Cli\u003EHands-on expertise with data classification, retention, encryption, and information protection strategies.\u003C/li\u003E\u003Cli\u003EExperience implementing controls to protect regulated data, including PHI, PII, and other sensitive information.\u003C/li\u003E\u003Cli\u003EDemonstrated ability to translate regulatory requirements (HIPAA, privacy, compliance, and risk management frameworks) into effective technical and operational controls.\u003C/li\u003E\u003Cli\u003EExperience leading complex, enterprise-wide programs involving multiple business and technology stakeholders.\u003C/li\u003E\u003Cli\u003EStrong executive communication, strategic planning, and organizational leadership skills. \u003C/li\u003E\u003Cli\u003EBachelor\u0027s degree or equivalent professional experience. \u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u003Cbr /\u003E\u003Cbr /\u003E\u003C/p\u003E\u003Cp\u003E\u003Cb\u003EPreferred Skills/Experience\u003C/b\u003E\u003C/p\u003E\u003Cbr /\u003E\u003Cul\u003E\u003Cli\u003EExperience with Microsoft Purview, Insider Risk Management, Information Protection, or comparable enterprise data security platforms.\u003C/li\u003E\u003Cli\u003EHealthcare, pharmaceutical, healthcare technology, or heavily regulated industry experience.\u003C/li\u003E\u003Cli\u003EExperience building enterprise governance frameworks, operating models, and data stewardship programs. \u003C/li\u003E\u003Cli\u003EExpertise in cloud security, SaaS security, and modern collaboration platforms.\u003C/li\u003E\u003Cli\u003EExperience leading large transformation initiatives and enterprise change management efforts.\u003C/li\u003E\u003Cli\u003EStrong understanding of audit readiness, control effectiveness, and compliance reporting. \u003C/li\u003E\u003Cli\u003EAdvanced financial management, vendor management, and contract negotiation experience. \u003C/li\u003E\u003Cli\u003EMaster\u0027s degree in Cybersecurity, Information Systems, Business Administration, or related field.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E\u003C/p\u003E\u003Cp\u003E\u003C/p\u003E\u003Cp\u003E\u003Cspan\u003EAt McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That\u2019s why we have a Total Rewards package that includes comprehensive benefits to support\u003Cspan\u003E\u003C/span\u003E\u003C/span\u003E\u003Cspan\u003Ephysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves. \u003C/span\u003E\u003C/p\u003E\u003Cp\u003E\u003C/p\u003E\u003Cp\u003E\u003Cspan\u003EAs part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job mark