SAP GRC Analyst: SoD, Access & ITGC Compliance

McKesson; Cork; Hybrid; EUR 56,300 - 93,800; Full time

Benefits offered by this job

Total Rewards package

Job summary

McKesson is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance across our SAP environment. You will manage SAP GRC processes, perform risk assessments, and strengthen controls to ensure regulatory and internal policy compliance.

You will work with cybersecurity, SAP, audit, and business stakeholders to identify risks, monitor compliance, and drive improvements, helping reduce organizational risk and strengthen the SAP platform.

Qualifications

• Degree in Information Security, Cybersecurity, Information Systems, Business, Risk Management, Audit, or related field, or equivalent experience.
• 4+ years of relevant experience in cybersecurity compliance, IT audit, governance, risk management, SAP security, or GRC functions.
• Hands-on experience with SAP GRC Suite including Access Control, Process Control, and/or Risk Management.
• Experience performing SoD analysis and remediation.
• Experience conducting User Access Reviews and Privileged Access Monitoring.
• Experience supporting ITGC testing, SOX compliance, and audit activities.

Responsibilities

• Manage and support SAP GRC processes, including Access Control, Process Control, and Risk Management.
• Perform SoD analysis, risk assessments, and remediation activities.
• Conduct User Access Reviews and Privileged Access Monitoring.
• Support ITGC testing, SOX compliance, and audit readiness initiatives.
• Identify control gaps, remediation actions, and track through completion.
• Develop and maintain compliance documentation, process procedures, and control evidence.
• Partner with SAP, cybersecurity, internal audit, and business teams to address security and compliance risks.
• Monitor compliance metrics and prepare reports for management and stakeholders.
• Support internal and external audits by gathering evidence, responding to requests, and facilitating walkthroughs.
• Recommend improvements to governance, risk, and compliance processes, tools, and controls to enhance efficiency and effectiveness.
• Contribute to cybersecurity and compliance initiatives that strengthen the organization's risk management framework.

Skills

SAP GRC Suite

SoD analysis

User Access Reviews

Privileged Access Monitoring

ITGC testing

SOX compliance

Audit support

Regulatory frameworks

GRC platforms

Stakeholder collaboration

Education

Degree in Information Security / related field

Tools

IRM platforms

GRC platforms

RegTech platforms

Job description

McKesson is seeking a Cybersecurity GRC Analyst to support governance, risk, and compliance across our SAP environment. You will manage SAP GRC processes, perform risk assessments, and strengthen controls to ensure regulatory and internal policy compliance.

You will work with cybersecurity, SAP, audit, and business stakeholders to identify risks, monitor compliance, and drive improvements, helping reduce organizational risk and strengthen the SAP platform.