Manager, Privacy

The Privacy Manager will play a critical role in supporting and advancing Cencora’s global privacy program. This role is responsible for day-to-day privacy operations, including privacy assessments, DSAR management, third-party privacy risk assessments, and operational governance using the OneTrust platform. The role requires strong hands-on execution capability, the ability to partner effectively with business, legal, IT, HR, and security teams, and a pragmatic, business-enabling approach to privacy compliance.

Responsibilities

Lead and manage end-to-end privacy operations, ensuring consistent execution of privacy processes across business units; Support the identification, documentation, and governance of business processes involving personal data (customers, employees, patients, vendors); Ensure privacy risks are identified early and appropriate mitigation actions are tracked and implemented; Act as hands-on user and operational lead for the OneTrust platform to support privacy assessments, creating Record of Processing Activities (RoPA), DSAR; Partner with internal stakeholders to continuously improve OneTrust workflows, templates, reporting, and adoption; Serve as a trusted privacy advisor to business stakeholders across regions; Translate complex privacy requirements into clear, practical guidance for the business; Support privacy awareness initiatives, trainings, and communications to strengthen privacy culture; Evaluate privacy risks related to data sharing, cross-border transfers, and vendor processing activities; Oversee and support DSAR intake, triage, coordination, and closure in line with regulatory timelines and internal SLAs; Support and execute additional responsibilities as assigned to ensure ongoing compliance with applicable global privacy and data protection regulations

Requirements

6+ years of experience in data privacy, privacy operations; Bachelor’s degree in Engineering (BE / BTech) or Law (LLB) from a recognized institution; Hands-on experience with OneTrust, including DSARs, privacy assessments; Sound understanding of global privacy frameworks (e.g., GDPR, DPDPA, UK GDPR, CCPA/CPRA) from an operational perspective; Proven ability to work cross-functionally with Legal, IT, Security, HR, and business teams; Strong documentation, communication, and stakeholder-management skills.

Nice to have

Privacy certifications such as CIPP/E, CIPM, or equivalent; Experience supporting global or multi-region privacy programs; Exposure to AI governance, data mapping, or privacy automation initiatives; Prior experience in healthcare, life sciences, or regulated industries