Director, Data Protection & DLP Strategy

Mckesson Corporation; Munster (IN); On-site; USD 150,000 - 230,000; Full time

Job summary

McKesson is seeking a strategic Director of Information Protection to lead enterprise-wide data protection initiatives safeguarding critical healthcare data. You will define and execute data protection strategies across cloud, endpoint, email, and collaboration environments while ensuring regulatory compliance.

The role partners with Cybersecurity, Privacy, Legal, IT, and business teams to mature governance, reduce risk, and translate complex regulatory requirements into scalable technical

Qualifications

• 12+ years in professional roles with 4+ years of people leadership in cybersecurity or data protection.
• Experience designing and scaling DLP across cloud, endpoint, email, and collaboration.
• Hands-on with data classification, retention, encryption, and information protection.
• Experience protecting PHI, PII, and other regulated data.
• Translate regulatory requirements into technical and operational controls.
• Lead enterprise-wide programs with multiple stakeholders.
• Strong executive communication and strategic planning.
• Bachelor's degree or equivalent professional experience.

Responsibilities

• Develop and execute enterprise data protection strategies.
• Design and scale DLP programs across cloud, endpoint, email, and collaboration platforms.
• Establish data classification, retention, encryption, governance programs across data lifecycle.
• Translate regulatory requirements (HIPAA, privacy, compliance, risk) into controls.
• Lead cross-functional governance and reporting across Cybersecurity, Privacy, Legal, IT, and business.
• Define governance standards, metrics, risk indicators, and compliance reporting for data protection.
• Drive continuous improvement through analytics, automation, and new security tech.
• Oversee budgeting, vendor relationships, and talent development for multiple teams.

Skills

Executive communication

Strategic planning

Data protection

DLP programs

Regulatory compliance

Cross-functional leadership

Risk management

Program management

Education

Bachelor's degree or equivalent

Master's degree in Cybersecurity

Tools

Microsoft Purview

Insider Risk Management

Information Protection platforms

Job description

McKesson is seeking a strategic Director of Information Protection to lead enterprise-wide data protection initiatives safeguarding critical healthcare data. You will define and execute data protection strategies across cloud, endpoint, email, and collaboration environments while ensuring regulatory compliance.

The role partners with Cybersecurity, Privacy, Legal, IT, and business teams to mature governance, reduce risk, and translate complex regulatory requirements into scalable technical