Lead Counsel – Technology

Overview

McKesson is seeking a Lead Counsel to join the Technology, Risk & People (TRP) pillar within the MMS Legal Department. The role provides practical, business-aligned legal support across technology, data, and risk-related matters, helping enable innovation while managing legal and regulatory risk. The position reports to the Managing Principal Counsel, Technology, Risk & People and partners with business, product, IT, and security teams on technology transactions, data-related matters (including AI), and cybersecurity and privacy work streams.

• Provide practical, risk-based legal advice to support day-to-day operations and business initiatives.
• Draft and negotiate technology and commercial agreements (e.g., SaaS, software, data use, vendor contracts) and advise on key risks and solutions.
• Develop and operationalize playbooks, templates, and fallback positions to improve contracting speed, consistency, and risk management.
• Translate privacy and data protection requirements (including HIPAA and U.S. privacy laws) into practical guidance and processes; support cybersecurity and incident response in coordination with internal subject-matter experts.
• Support adoption of AI and other emerging technologies with governance approaches aligned to evolving regulatory expectations.
• Lead legal support for enterprise technology initiatives (platform implementations, data strategies, AI-enabled solutions) and build scalable frameworks to support growth and risk management.
• Collaborate with Regulatory, Employment, and Litigation counsel to deliver enterprise-wide risk management across the TRP pillar.
• Partner with legal, compliance, IT, security, product, and HR teams to address cross-functional issues.
• Monitor regulatory developments and translate them into clear, actionable guidance for the business.

• Minimum Requirements:
  
  Juris Doctor (JD) and active U.S. bar membership; 7–10 years of legal experience, including in-house or comparable advisory experience.
• Critical
  
  Skills & Experience:
  
  Experience with technology and commercial transactions; privacy, data protection, and/or cybersecurity (including incident response); data-related legal and regulatory issues; working knowledge of HIPAA and U.S. privacy laws; strong drafting, negotiation, and issue-spotting skills; ability to provide clear, practical, business-oriented legal guidance; adaptability in evolving business environments; strong collaboration and communication skills.

• Experience in the healthcare or healthcare technology industry; familiarity with AI, digital health, or data-driven business models; exposure to privacy programs or data governance initiatives; certifications such as CIPP/US or similar.

• Hybrid work model; up to 25% travel.
• Authorization:
  Must be authorized to work in the United States; sponsorship is not available.