Senior HIPAA & HITRUST Compliance Lead

McKesson; Cork; On-site; EUR 73,000 - 121,000; Full time

Benefits offered by this job

Comprehensive benefits

Total Rewards program

Job summary

McKesson is seeking a Senior Healthcare Compliance Analyst to lead and support healthcare regulatory compliance initiatives, focusing on ePHI protection and HIPAA Security Rule adherence. You will partner with Legal, Privacy, Technology, and Cybersecurity teams to assess risks, validate controls, and maintain audit readiness.

Responsibilities include HIPAA assessments, risk analyses, remediation coordination, and ongoing regulatory monitoring across HIPAA, Privacy, HITRUST CSF, GDPR, PIPEDA, and

Qualifications

• 7+ years of experience in Healthcare Compliance or related fields.
• Experience conducting HIPAA Security Rule assessments.
• Experience supporting healthcare regulatory audits and compliance programmes.
• Experience working with healthcare applications, systems, or services that process ePHI.
• Ability to influence or negotiate with stakeholders and manage priorities.

Responsibilities

• Lead HIPAA Security Rule compliance activities across applications, systems, and processes.
• Conduct HIPAA Security Assessments and Attestations for in-scope apps.
• Support enterprise HIPAA Risk Analysis and Risk Management.
• Validate safeguards with evidence of effectiveness and documentation.
• Coordinate remediation with business and technology stakeholders.
• Support HITRUST CSF and regulatory compliance initiatives.
• Maintain audit-ready evidence and regulatory documentation.

Skills

Regulatory compliance

Risk assessment

Audit readiness

Stakeholder management

Written communication

Tools

GRC software

Job description

McKesson is seeking a Senior Healthcare Compliance Analyst to lead and support healthcare regulatory compliance initiatives, focusing on ePHI protection and HIPAA Security Rule adherence. You will partner with Legal, Privacy, Technology, and Cybersecurity teams to assess risks, validate controls, and maintain audit readiness.

Responsibilities include HIPAA assessments, risk analyses, remediation coordination, and ongoing regulatory monitoring across HIPAA, Privacy, HITRUST CSF, GDPR, PIPEDA, and