Senior Counsel – Technology

McKesson•Richmond, VA

4d•Hybrid

About The Position

McKesson is seeking a Senior Counsel to join its Technology, Risk & People (TRP) pillar within the MMS Legal Department. This role is crucial for MMS's transition to a standalone company, providing business-aligned legal support for technology, data, and risk matters. The position will enable innovation while managing legal and regulatory risks. The Senior Counsel will serve as a key legal partner to business, product, IT, and security teams, with a primary focus on technology transactions and data-related issues, including AI. The role also supports cybersecurity and privacy workstreams in collaboration with internal stakeholders. Success in this role requires sound judgment, strong collaboration, and adaptability in a dynamic environment with evolving priorities and some ambiguity. The candidate will be instrumental in establishing scalable legal frameworks and supporting the responsible adoption of emerging technologies across MMS.

Requirements

JD and active U.S. bar membership
7–10 years of legal experience, including in-house or comparable advisory experience
Experience with technology and commercial transactions
Experience with privacy, data protection, and/or cybersecurity (including incident response)
Experience with data-related legal and regulatory issues
Working knowledge of HIPAA and U.S. privacy laws
Strong drafting, negotiation, and issue-spotting skills
Demonstrated ability to provide clear, practical, business-oriented legal guidance
Proven ability to adapt to evolving business needs and operate effectively in ambiguous situations
Strong collaboration and communication skills
Must be authorized to work in the United States; sponsorship is not available

Nice To Haves

Experience in the healthcare or healthcare technology industry
Familiarity with AI, digital health, or data-driven business models
Exposure to privacy programs or data governance initiatives
Certifications such as CIPP/US or similar

Responsibilities

Provide practical, risk-based legal advice supporting day-to-day operations and business initiatives.
Draft and negotiate commercial and technology agreements (e.g., SaaS, software, data use, vendor contracts) and advise on key risks and solutions.
Develop and operationalize playbooks, templates, and fallback positions to improve contracting speed, consistency, and risk management across the business.
Translate privacy and data protection requirements (including HIPAA and U.S. privacy laws) into practical guidance and processes.
Support cybersecurity and incident response matters in coordination with internal SMEs.
Provide practical legal guidance for the adoption of AI and other emerging technologies.
Help establish governance approaches aligned with evolving regulatory expectations for emerging technologies.
Lead legal support for enterprise technology initiatives (including platform implementations, data strategies, and AI-enabled solutions).
Build scalable frameworks to support growth and risk management.
Partner with Regulatory, Employment, and Litigation counsel to deliver integrated, enterprise-level risk management across the TRP pillar.
Collaborate with legal, compliance, IT, security, product, and HR teams to address cross-functional issues.
Manage competing priorities, adjust to changing business needs, and operate effectively with limited structure in certain areas.
Monitor legal and regulatory developments and translate them into clear, actionable guidance for the business.