Senior Privacy and Governance Specialist

Job Summary

The Senior Privacy and Governance Specialist, reporting to the VP, Compliance & Ethics (Canada), plays a key role in advancing and embedding both privacy and data governance practices across McKesson Canada. The role provides subject matter expertise on privacy, data governance, and risk management to support compliance with legal, regulatory, and enterprise requirements while enabling practical, business-aligned solutions.

The role is responsible for core privacy and governance activities, including privacy impact assessments, incident and breach management, governance monitoring, policy and procedure development, training, and support for data management and quality initiatives. It also supports the development and maintenance of metrics, reporting, and analytics dashboards to monitor program effectiveness, identify trends, and inform leadership decision-making.

This role is expected to use AI and other technology-enabled tools responsibly in day-to-day work to improve efficiency, strengthen analysis and reporting, and identify opportunities to streamline lower-value activities so that effort can be focused on higher-impact, strategic work. Success in the role requires sound judgment, strong project management, discretion, and effective collaboration across business, legal, compliance, and enterprise stakeholders.

Specific Responsibilities

Privacy

• Lead and support privacy impact assessments and related privacy risk reviews across McKesson Canada lines of business.

• Provide privacy guidance on new initiatives, systems, and business processes in accordance with applicable laws, contractual obligations, and enterprise requirements.

• Coordinate privacy incidents and breach investigations, including impact assessment, mitigation, escalation, and recommendations.

• Develop, maintain, and support implementation of privacy policies, standards, procedures, training, and monitoring activities.

• Support data subject rights requests, privacy research, and ongoing enhancement of the privacy program.

Data Governance

• Support implementation and sustainment of data governance and data management processes, including related policies, standards, procedures, tools, and stakeholder communications.

• Monitor and report on governance requirements, issues, impacts, and resolution status to support effective oversight.

• Conduct needs assessments, identify gaps, and recommend improvements to strengthen governance, data management, and process effectiveness.

• Act as an independent advisory resource to help ensure governance issues are appropriately identified, assessed, escalated, and resolved. Support data strategy and data quality initiatives in alignment with governance and business objectives.

Privacy and Data Governance

• Develop and maintain privacy and governance metrics, dashboards, and reporting to measure program effectiveness, monitor trends, and support leadership decision-making.

• Support root cause analysis and remediation planning to improve risk management, data quality, and control effectiveness.

• Partner with business, legal, compliance, and enterprise stakeholders to identify, assess, and address privacy and governance issues.

• Stay current on legal, regulatory, and industry developments affecting privacy, governance, and responsible data use.

• Use AI and other digital tools responsibly to improve efficiency, enhance analysis and reporting, and identify opportunities to automate or simplify routine work.

General Responsibilities

• Build and maintain effective stakeholder relationships to support alignment, adoption, and execution.

• Support strategic privacy and data governance initiatives across the organization.

• Work independently across complex and sensitive matters, exercising sound judgment and discretion.

• Develop practical, risk-based recommendations informed by business needs and enterprise requirements.

• Serve as a subject matter expert on privacy and data governance risks, controls, and best practices.

• Develop and maintain procedures, controls, and business processes that support program effectiveness and compliance.

• Support or facilitate regulatory, customer, and internal reviews related to privacy and data governance.

• Continuously identify opportunities to improve ways of working through simplification, better prioritization, stronger reporting, and responsible use of AI-enabled tools.

Qualifications

• Bachelor’s degree or equivalent experience required.

• Minimum 7 years of experience in privacy, data governance, compliance, or related roles.

• Strong knowledge of applicable privacy legislation, including PIPEDA; CIPP/C designation preferred.

• Experience supporting data governance, data management, or data quality programs in a complex business environment.

• Strong analytical and problem-solving skills, including experience with privacy assessments, investigations, and risk analysis.

• Experience developing and maintaining metrics, dashboards, and reporting to support oversight and decision-making.

• Demonstrated ability to use AI and technology-enabled tools responsibly and effectively to improve efficiency and analysis.

• Proven ability to manage competing priorities, maintain confidentiality, and work effectively across cross-functional teams.

• Strong written and verbal communication skills, including stakeholder engagement, training, and executive-ready reporting.

• Bilingual proficiency in English and French is considered an asset.

• Strong commitment to ethical standards, integrity, and sound governance practices.