Senior SAP GRC & SOX Compliance Analyst

McKesson; Cork; Hybrid; EUR 72,000 - 120,000; Full time

Benefits offered by this job

Total Rewards package

Competitive compensation

Job summary

McKesson, a Fortune 10 health care leader, seeks a Sr. SOX and Compliance Analyst, SAP Applications, to strengthen enterprise governance, risk, and compliance.

You will lead SAP GRC modules, perform SOX testing, and work with IAM and auditors to drive continuous improvements across SAP environments. The role requires 7+ years in GRC/SOX, strong SAP GRC/SailPoint experience, and deep ITGC knowledge, with broad cyber risk awareness.

Qualifications

• 7+ years of experience in GRC, IT Audit, Information Security, SOX or related fields.
• Bachelor's degree or equivalent experience in a relevant domain.
• Hands-on experience configuring SAP GRC Access Control and/or SAP Process Control.
• Experience with SOX controls testing, evidence collection, documentation, and remediation.
• Experience with IT General Controls (ITGC) testing, monitoring, and reporting.
• Experience supporting Identity Governance and Administration (IGA) programs such as SailPoint.
• Knowledge of cybersecurity risk management, vulnerabilities, and security controls.

Responsibilities

• Lead SAP GRC Access Control and SAP Process Control configuration and optimization.
• Perform SOX control testing including evidence collection and audit support.
• Collaborate with Identity & Access Management to enhance SailPoint for SAP environments.
• Conduct cybersecurity vulnerability assessments and resiliency testing.
• Monitor ITGCs and coordinate remediation of control deficiencies.
• Analyze compliance risks and recommend corrective actions for improvements.
• Develop compliance reports and risk metrics for executives.

Skills

GRC & Compliance

SOX Compliance

IT Audit

Cybersecurity

Stakeholder Mgmt

Data analysis

Communication

Education

Bachelor's degree in Information Systems, Cybersecurity, Accounting, Risk Management, or related field

Tools

SAP GRC

SAP Process Control

SailPoint

ITGC Testing

Active Directory

Job description

McKesson, a Fortune 10 health care leader, seeks a Sr. SOX and Compliance Analyst, SAP Applications, to strengthen enterprise governance, risk, and compliance.

You will lead SAP GRC modules, perform SOX testing, and work with IAM and auditors to drive continuous improvements across SAP environments. The role requires 7+ years in GRC/SOX, strong SAP GRC/SailPoint experience, and deep ITGC knowledge, with broad cyber risk awareness.