SAP GRC Analyst — SoD & SOX Compliance

McKesson; Cork; Hybrid; EUR 56,000 - 94,000; Full time

Job summary

McKesson Ireland is seeking an experienced Cybersecurity GRC Analyst, SAP Platform to support and strengthen our Governance, Risk, and Compliance program. You will help ensure regulatory and internal control requirements while improving risk management across the enterprise.

You will partner with business, security, audit, and technology teams to implement and maintain effective controls, manage SAP GRC solutions, and support audit readiness.

Qualifications

• 4+ years of experience in SAP GRC, IT risk, compliance, IT audit, cybersecurity governance, or related fields.
• Bachelor's degree in Information Systems, Information Security, Risk Management, Accounting, Business, or a related discipline; or equivalent experience.
• Hands‑on experience with SAP GRC Access Control, Process Control, or Risk Management.
• Experience performing Segregation of Duties (SoD) analysis and remediation.
• Experience conducting User Access Reviews and access governance activities.
• Experience supporting SOX compliance, ITGC testing, and audit documentation.
• Strong understanding of risk management, internal controls, and compliance frameworks.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Administer and support the SAP GRC Suite, including Access Control, Process Control, and Risk Management.
• Perform SoD analysis, identify conflicts, and partner with stakeholders on remediation activities.
• Lead User Access Reviews (UARs) and support Privileged Access Monitoring to ensure appropriate system access.
• Execute and document ITGC and SOX control testing, maintaining audit-ready evidence and compliance documentation.
• Support internal and external audits by providing evidence, responding to inquiries, and tracking remediation activities.
• Conduct risk assessments and control reviews to identify gaps and recommend improvements.
• Monitor control effectiveness, compliance metrics, and reporting to support leadership decision-making.
• Partner with cross-functional teams to strengthen governance, risk, compliance, and security practices across the organization.

Skills

SAP GRC

IT risk

Compliance

IT audit

Governance

SOX

Audit documentation

Education

Bachelor's degree in Information Systems

Tools

SAP GRC Access Control

Process Control

Risk Management

SAP BTP

Azure

Job description

McKesson Ireland is seeking an experienced Cybersecurity GRC Analyst, SAP Platform to support and strengthen our Governance, Risk, and Compliance program. You will help ensure regulatory and internal control requirements while improving risk management across the enterprise.

You will partner with business, security, audit, and technology teams to implement and maintain effective controls, manage SAP GRC solutions, and support audit readiness.