Analyst II

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today

POSITION SUMMARY:
Reporting to the Privacy Lead, the Data Risk & Privacy Analyst II will assist the privacy lead in leading the development, implementation and monitoring of the privacy program to align with corporate strategy and to meet state/federal/international regulatory requirements. This position formulates recommendations for mitigation of enterprise privacy risks and promotes a culture of Privacy By Design.

PRIMARY DUTIES AND RESPONSIBILITIES:

• Lead complex regulatory privacy risk assessments using privacy tool One Trust based on the requirements of the Global Privacy Operations team to ensure compliance with the corporate privacy policies, standards and/or federal/state/international privacy requirements.
• Conduct reviews, analysis and research on current, proposed, and newly adopted privacy laws and regulations to advise management on the impact to the business. Monitor, identify, interpret and map privacy regulatory requirement changes and their impact across the enterprise.
• Lead privacy projects to include new businesses into global privacy program develop new or improve business processes to ensure compliance with newly adopted privacy laws and regulations.
• Review and consult on complex enterprise initiatives to determine compliant data use, permissible data sharing, and minimum necessary access requirements to ensure compliance with state/federal/ international privacy requirements, including HIPAA, GDPR, CCPA, etc.
• Conduct due diligence, review and ongoing monitoring of high-risk vendors that will send or receive personal information to identify and mitigate privacy risks. Partner with the vendor and the Business Unit to mitigate known privacy risks.

• Be a reliable subject matter resource on privacy regulations (HIPAA, GDPR, CCPA, etc.) as well as emerging data privacy topics at large.

• Perform related duties as assigned. 

EXPERIENCE AND EDUCATIONAL REQUIREMENTS:

• Postgraduate Degree in a Related Field – [e.g., Data Protection, Compliance, or Business Law] OR Bachelor of Laws (LLB)
• 5 years of experience in privacy compliance within a federally regulated industry with international business operations.
• Experience/familiarity with OneTrust
• Desired:
• Certified Information Privacy Professional (CIPP-EU) certification and/or legal experience in privacy and AI governance.

MINIMUM SKILLS, KNOWLEDGE AND ABILITY REQUIREMENTS:

• Experience of conducting privacy assessment DPIA/TIA on privacy management tool like OneTrust.
• Strong knowledge of and experience in interpreting federal/state/international and industry privacy laws, regulations, legal opinions, and providing guidance related to the identifying, interpreting and applying regulatory related issues and activities to business practices.
• Demonstrated strategic planning and leadership skills; ability to motivate and influence company associates at all levels across the organization to comply with regulatory standards.
• Excellent analytical, problem solving and negotiating skills. Ability to effectively present information and respond to questions from groups of managers, employees and Business Unit Privacy Liaisons.
• Ability to work effectively and efficiently in pressure situations and demonstrate a high level of flexibility in a rapidly changing environment while handling complex assignments simultaneously.
• Ability to work independently with strong, strategic planning and organizational skills; self-motivated and directed, adaptable, team focused and detail oriented.
• Demonstrated experience in writing, communication and presentation skills. Personal computer skills to include competency with Microsoft Office Word, Excel, Power Point, Outlook, and Smart Sheet.

.

• 6- 8 years of experience in Data Privacy, Privacy Operations
• Education:  Bachelor's Degree in related field of study
• Possible certifications -  FIP, CIPP/E, CIPM, OneTrust, and BigID (preferred)
• Hands-on work with General Data Protection Regulation (GDPR), CA Consumer Privacy Act (CCPA) along with an extensive track record in executing organization-wide privacy compliance & governance tasks, including Privacy Impact and Data Protection Impact Assessments.
• Experience required:
• Handling of day-to-day privacy operations and strategic Data Protection Impact Assessment (DPIAs), including incident management, mailbox monitoring, data protection queries, and consolidating multiple DPIAs into single assessments for single business processes.
• Evaluation and enhancement of an overall Data Protection, Data Privacy, and Responsible AI strategy for a client engagement.
• Detail oriented mindset with strong analytical skills
• Excellent communication skills with the ability to collaborate effectively across departments.

​Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call or email We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned