Privacy Manager

What Privacy contributes to Cardinal Health

Legal provides the company with strategic, proactive, practical and cost-effective legal advice and services in order to protect the organization's assets, operations and image. This function provides legal counsel related to commercial, corporate securities, intellectual property, labor and employment, and regulatory law, among other areas. This function also litigates all company legal matters, manages outside counsel and manages legal operations.

Privacy is responsible for providing advice, counsel, and support in the areas of privacy and data protection. This family structure includes privacy professionals working in our Enterprise Privacy Office and in our businesses. The Enterprise Privacy Office leads the global privacy program and partners with business leaders and their teams, other members of the Legal & Compliance organization, and the privacy professionals working within the business. Members of this family in the business and the Enterprise Privacy Office identify and address potential privacy issues and risks and help our businesses comply with the rapidly evolving privacy laws, regulations and contractual requirements.

What is expected of you and others at this level

Manages department operations and supervises professional employees, front line supervisors and / or business support staff

Participates in the development of policies and procedures to achieve specific goals

Ensures employees operate within guidelines

Decisions have a short term impact on work processes, outcomes and customers

Interacts with subordinates, peers, customers, and suppliers at various management levels; may interact with senior management

Interactions normally involve resolution of issues related to operations and / or projects

Gains consensus from various parties involved

Responsibilities

Serve as a functional Privacy expert for Cardinal Health's "other" specialty businesses such as Nuclear Pharmacy, Medical, and OptiFreight Logistics, working closely with and advising business leaders, commercial counsel, and other colleagues on all legal aspects of privacy, including data protection, data retention, data usage, data security and data breaches

Provide guidance, direction, and practical translation of legislative and regulatory privacy requirements to cross-functional teams on complex projects

Assist with the management of legislative and regulatory inquiries, investigations or administrative actions related to privacy and data security

Assist colleagues with the review and negotiation of data privacy agreements, data processing agreements, business associate agreements and other similar agreements

Support acquisitions, divestitures, and joint ventures as they relate to privacy matters

Develop and deploy privacy policies and procedures to ensure compliance with applicable data privacy laws and regulations

Lead efforts to promote awareness of privacy risks and promote a culture of privacy compliance on the design and provision of privacy training program

Create and deliver tailored privacy training programs for diverse audiences

Direct the investigation and resolution of privacy incidents and data breach reporting processes in coordination with the VP of Privacy

Remain up to date on legislative developments in the field of privacy at the state, federal and international level that may affect applicable businesses, and work with commercial counsel and government relations to identify potential strategic changes that might be adopted

Requirements

Proven expertise in HIPAA Privacy and Security Rules

Extensive knowledge of U.S. privacy and cybersecurity laws, regulations, and standards, including HIPAA, state privacy laws (e.g., comprehensive state privacy laws, state breach notification, etc.), as well as consumer protection and employment-related privacy laws and regulations

Prior experience acting supporting businesses with digital and technology solutions in healthcare space (e.g., advanced analytics tools, data lakes, and direct-to-consumer digital offerings) and advising and collaborating with different business teams (Product, Engineering, Information Security) to ensure privacy controls are designed and implemented

Strong relationship-building and collaboration skills

Solution and results oriented, with the ability to prioritize and deliver key initiatives

Project management skills with the ability to keep multiple projects moving forward simultaneously

Ability to juggle multiple tasks and prioritize under tight time constraints

Knowledge of international privacy and data security laws, including GDPR, preferred

CHPC, CHPS, or CIPP certification, preferred

Qualifications

8-12 years of experience, preferred

Bachelor's degree in related field, or equivalent work experience, preferred

Anticipated salary range : $103,500 - $147,900

Bonus eligible : Yes

Benefits : Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

Medical, dental and vision coverage

Paid time off plan

Health savings account (HSA)

401k savings plan

Access to wages before pay day with myFlexPay

Flexible spending accounts (FSAs)

Short- and long-term disability coverage

Work-Life resources

Paid parental leave

Healthy lifestyle programs

Application window anticipated to close : 11 / 15 / 2025

• if interested in opportunity, please submit application as soon as possible.

The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity / expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here (https : / / www.cardinalhealth.com / content / dam / corp / email / documents / corp / cardinal-health-online-application-privacy-policy.pdf)