Technology Governance & Compliance Director

McKesson • Irving, TX

2d

About The Position

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you. This is an individual contributor role. Position Summary: The Technology Governance & Compliance Director is a senior, business‑aligned technology leader responsible for validation and enforcement of all regulatory, cybersecurity, and contractual requirements—including any audits and assessments across large Oncology Practices. This role provides strategic oversight and hands‑on execution of IT compliance activities across large Oncology Practices serving as the central point of accountability for identifying risks, coordinating remediation, managing Corrective Action Plans (CAPs), recommending proactive measures, and managing annual security audits. This position is a senior Individual Contributor leader responsible for the technology compliance function.

Requirements

• Bachelor’s degree (in Information Technology, Cybersecurity, Business, or related field), or equivalent experience.
• 8+ years in IT compliance, risk management, cybersecurity governance, or audit.
• Strong understanding of HIPAA, SOX, NIST, HITRUST.
• Ability to lead complex compliance initiatives.

Nice To Haves

• Healthcare or regulated-industry experience.
• Experience with AI related compliance and security assessments.
• Certifications such as CISA, CRISC, CISSP, HCISPP.
• Experience supporting external audits and governance programs.

Responsibilities

• Enforce technology related compliance Governance & Risk Management.
• Corrective Action Plans (CAP) Ownership & RCA Management.
• Internal and external audit and assessment readiness management including preparation, evidence collection, coordination, and follow‑through.
• Stakeholder Partnership & Operational Execution.
• Documentation, Reporting & Governance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees