Director, Compliance & Ethics

McKesson; Mississauga; Hybrid; CAD 127,000 - 169,000; Full time

Job summary

McKesson Canada is seeking a Director of Privacy & Compliance & Ethics to lead the company’s privacy, ethics, and governance programs. You will guide risk assessments, regulatory engagement, training, and reporting while partnering with Legal, HR, IT, and Internal Audit to strengthen controls and culture of compliance.

The role requires 8–12+ years in privacy/compliance, strong leadership, and ability to influence executives.

Qualifications

• Bachelor's degree or equivalent business experience.
• 8-12+ years of progressive experience in privacy, compliance, ethics, risk management, regulatory affairs, governance, healthcare, or related disciplines.
• Minimum 3 years of leadership experience with responsibility for talent development and delivery of complex enterprise initiatives.
• Experience identifying and leveraging emerging technologies to drive innovation, improve organizational effectiveness, strengthen risk management, and enable business growth in a regulated environment.
• Experience leading regulatory interactions, investigations, audits, monitoring programs, and risk assessments.
• Demonstrated ability to influence executive stakeholders and lead complex cross-functional initiatives.
• Strong business acumen, strategic planning, change leadership, and organizational effectiveness capabilities.
• Excellent communication, facilitation, presentation, negotiation, and relationship management skills.
• Proven ability to balance risk management with business enablement in a highly regulated environment.

Responsibilities

• Lead strategic leadership and governance for privacy, compliance, ethics, and governance initiatives across the organization.
• Oversee the implementation and continuous improvement of McKesson Canada’s Privacy & Compliance Program.
• Direct risk assessments, monitoring, investigations, and corrective action processes.
• Support regulatory inquiries, audits, and reporting obligations with Legal and stakeholders.
• Lead privacy and compliance communications, training, and culture-building efforts.
• Partner with Data Governance and IT to strengthen information governance and responsible data use.
• Deliver dashboards and analytics to management on program performance and risk trends.
• Develop and mentor a high-performing privacy and compliance team.

Skills

Leadership

Privacy & Compliance

Risk management

Strategic planning

Communication skills

Education

Bachelor's degree or equivalent

Master's degree (preferred)

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Work Arrangement: This is a hybrid position requiring candidates to work on‑site at least 2 days per week at our office in Mississauga. The remaining days may be worked remotely, subject to team and business needs.

About the Role (Job Summary)

The Director, Compliance & Ethics reports to the Vice President, Compliance & Ethics (Canada) and serves as a strategic leader responsible for the implementation, oversight, and continuous improvement of McKesson Canada’s Privacy & Compliance Program. The Director leads privacy, compliance, ethics, and governance initiatives that protect the organization, support business growth, and foster a culture of integrity and accountability. The role provides strategic guidance on privacy, regulatory, ethics, and compliance matters, partnering across business units to identify and mitigate risk, strengthen controls, and ensure compliance with applicable laws, regulations, contractual obligations, and company policies. The Director is accountable for the execution and oversight of key program elements, including privacy, compliance, and ethics programs; policy governance; risk assessments; compliance monitoring; investigations; privacy incident management; training and awareness; corrective action management; regulatory engagement; and executive reporting. The role translates strategic objectives into practical business solutions that enable responsible growth while managing risk. The Director leads and develops a team of privacy and compliance professionals and serves as a trusted advisor to business leaders. The role provides oversight of governance processes, including Privacy Impact Assessments (PIAs), privacy-by-design initiatives, and compliance monitoring programs, while collaborating with Legal, Human Resources, Internal Audit, Enterprise Compliance, Information Security, Data Governance, and other functions to enhance organizational effectiveness and compliance maturity. Success in this role requires strategic thinking, sound judgment, organizational influence, business acumen, and the ability to lead change in a complex and highly regulated environment.

What You'll Do (Responsibilities)

Strategic Leadership & Governance

Implement functional priorities and oversee the execution of McKesson Canada’s Privacy & Compliance strategy through the programs, initiatives, and resources assigned to the function. Provide subject matter expertise and strategic guidance to business and functional leaders on privacy, compliance, ethics, and governance matters. Drive initiatives that strengthen compliance culture, ethical decision‑making, accountability, and risk awareness. Partner with business leaders to embed privacy, compliance, and governance principles into business planning, transformation initiatives, and operational processes. Provide leadership and oversight for governance forums and reporting Evaluate, promote, and lead the responsible adoption of other emerging technologies to strengthen compliance, privacy, and governance program effectiveness, enhance oversight, improve operational efficiency, and enable greater focus on high‑impact, risk‑based priorities while aligning with regulatory and ethical expectations. Establish functional priorities and oversee resource allocation to ensure effective program delivery, organizational alignment, and continued compliance program maturity. Lead organizational change initiatives that strengthen compliance capabilities, governance practices, and business adoption of compliance and privacy requirements.

Privacy & Compliance Program Oversight

Lead the implementation, operation, and continuous improvement of key components of McKesson Canada’s Privacy & Compliance Program. Influence and support governance frameworks, standards, policies, procedures, and controls related to privacy, compliance, ethics, and associated information governance practices. Support the integration of new business units, acquisitions, products, services, and strategic initiatives into established compliance and privacy frameworks. Champion Privacy by Design principles and oversee enterprise privacy governance processes, including Privacy Impact Assessments (PIAs), data use reviews, privacy consultations, and privacy risk assessments.

Risk Management, Monitoring & Investigations

Lead privacy and compliance risk assessments to identify emerging risks, evaluate control effectiveness, and develop mitigation strategies. Oversee risk‑based monitoring, auditing, and assessment activities to proactively identify trends, vulnerabilities, and opportunities for improvement. Oversee investigations and assessments relating to potential privacy, ethics, compliance, or regulatory concerns and ensure matters are appropriately reviewed, resolved, and documented. Ensure corrective and preventive action plans are developed, implemented, monitored, and reported through appropriate governance channels. Monitor changes in the regulatory environment and assess organizational impacts and response strategies.

Regulatory & External Stakeholder Engagement

Support regulatory inquiries, investigations, audits, inspections, and reporting obligations. Collaborate with Legal and business stakeholders to manage regulatory risk and ensure consistent organizational responses.

Training, Communications & Culture

Lead privacy and compliance communications, awareness, and education programs that promote ethical conduct and regulatory compliance. Foster a speak‑up culture and support organizational awareness of reporting mechanisms, compliance obligations, and privacy responsibilities. Partner with Human Resources, Legal, Information Security, Internal Audit, and business leaders to deliver effective training and culture‑building initiatives.

Data Governance & Business Enablement

Partner with Data Governance, Information Security, Technology, and business leaders to strengthen information governance, data stewardship, data protection, and responsible data use practices. Enable business innovation by providing practical, risk‑based privacy and compliance guidance supporting strategic initiatives and operational objectives. Promote consistent governance standards across business units while balancing regulatory requirements and business needs.

Reporting & Analytics

Deliver strategic compliance, privacy, ethics, and risk reporting and recommendations to senior leadership Leverage metrics, trends, and analytics to evaluate program effectiveness, support decision‑making, and drive continuous improvement. Communicate emerging risks, program performance, and strategic recommendations to management.

People Leadership

Build, lead, and develop a high‑performing team through coaching, talent development, succession planning, performance management, and employee engagement. Establish priorities, allocate resources, and drive accountability to achieve business objectives. Promote collaboration, innovation, continuous improvement, and professional development across the team.

Basic Requirements

• Bachelor's degree or equivalent business experience.
• 8-12+ years of progressive experience in privacy, compliance, ethics, risk management, regulatory affairs, governance, healthcare, or related disciplines.
• Minimum 3 years of leadership experience with responsibility for talent development and delivery of complex enterprise initiatives.
• Experience identifying and leveraging emerging technologies to drive innovation, improve organizational effectiveness, strengthen risk management, and enable business growth in a regulated environment.
• Experience leading regulatory interactions, investigations, audits, monitoring programs, and risk assessments.
• Demonstrated ability to influence executive stakeholders and lead complex cross‑functional initiatives.
• Strong business acumen, strategic planning, change leadership, and organizational effectiveness capabilities.
• Excellent communication, facilitation, presentation, negotiation, and relationship management skills.
• Proven ability to balance risk management with business enablement in a highly regulated environment.

Preferred Skills/Experience

• Master's degree, or other relevant advanced degree.
• Privacy designation (CIPP/C, CIPM, or equivalent).
• Strong knowledge of Canadian privacy laws, healthcare regulations, compliance frameworks, and governance principles.
• Bilingual (French/English).

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson’s pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long‑term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $126,900 - $169,200

McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity,national origin, protected veteran status, disability, age, genetic information, or any other legally protected category.

McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities.

If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) [e-mail] or (Canada) [e-mail]. Resumes or CVs submitted to this email box will not be accepted.

Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.