SOX and Compliance Analyst

Financeroles; Cork; On-site; EUR 56,000 - 94,000; Full time

Job summary

McKesson is seeking a SOX and Compliance Analyst to support governance, risk, and compliance initiatives across SAP GRC, SailPoint, and cybersecurity reporting. The role collaborates with Information Security, Internal Audit, and business stakeholders to strengthen controls and reduce risk.

The ideal candidate brings hands-on SAP GRC administration, ITGC/SOX testing experience, and strong analytical and stakeholder management skills to ensure regulatory compliance across the enterprise.

Qualifications

• Bachelor's degree or equivalent in IS/CS/Accounting or related field.
• Hands-on experience administering SAP GRC Access Control/Process Control.
• Experience performing SOX controls testing and audit support.
• Experience with SailPoint Identity Governance or similar IAM platforms.
• Knowledge of ITGC, SoD, and regulatory frameworks.
• Experience in cybersecurity compliance reporting and risk metrics.

Responsibilities

• Administer SAP GRC Access Control and Process Control, including SoD monitoring.
• Execute SOX ITGC testing, evidence collection, and issue tracking.
• Support SailPoint IGA processes, reviews, and provisioning workflows.
• Develop cybersecurity compliance dashboards and executive risk reports.
• Coordinate audit activities and provide audit evidence.
• Drive remediation plans and track control exceptions to closure.
• Identify opportunities to improve governance and automation across GRC.

Skills

4+ years GRC experience

IT governance

SOX compliance

SailPoint experience

SAP GRC administration

ITGC knowledge

auditing support

cybersecurity reporting

stakeholder management

communication skills

Education

Bachelor's degree in IS/CS/Accounting or related

Tools

SAP GRC Access/Process Control

SailPoint IGA

Cybersecurity reporting tools

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

McKesson is seeking a SOX and Compliance Analyst to support enterprise governance, risk, and compliance initiatives across SAP, Identity Governance, Cybersecurity, and Internal Controls. This role will be responsible for administering SAP GRC platforms, supporting SOX compliance activities, managing user access governance processes through SailPoint, producing cybersecurity compliance reporting, and partnering with internal and external auditors to strengthen the organization’s control environment.

The ideal candidate combines technical expertise, compliance knowledge, and analytical problem‑solving skills to improve control effectiveness, reduce risk, and support regulatory compliance across the enterprise. This position operates within McKesson’s Governance, Risk, and Compliance (GRC) organization and collaborates with Information Security, Internal Audit, Application Teams, and Business Stakeholders.

What You'll Do

• Administer and support SAP GRC Access Control and Process Control solutions, including user provisioning, access requests, emergency access management, and Segregation of Duties (SoD) monitoring.
• Execute SOX ITGC and automated control testing activities, including evidence collection, documentation, validation, and issue tracking.
• Support SailPoint Identity Governance & Administration (IGA) processes, user access reviews, certification campaigns, role management, and provisioning workflows.
• Develop and maintain cybersecurity compliance dashboards, risk reports, vulnerability tracking metrics, and executive reporting.
• Partner with Information Security teams to monitor remediation efforts for identified vulnerabilities and control deficiencies.
• Coordinate internal and external audit activities, provide audit evidence, and support walkthroughs and testing requests.
• Track control exceptions and drive remediation plans through closure while ensuring compliance with internal policies and regulatory requirements.
• Identify opportunities to improve governance, compliance, automation, and operational effectiveness across GRC processes.

Basic Requirements

• 4+ years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, SOX Compliance, Cybersecurity Compliance, Identity & Access Management, or related fields.
• Bachelor's degree in Information Systems, Information Security, Computer Science, Accounting, Risk Management, Business Administration, or a related field; or equivalent combination of education and experience.
• Hands‑on experience administering SAP GRC Access Control and/or SAP Process Control.
• Experience performing SOX controls testing, audit support, evidence collection, and compliance documentation.
• Experience supporting SailPoint Identity Governance & Administration (IGA) or similar IAM platforms.
• Knowledge of IT General Controls (ITGC), access governance, Segregation of Duties (SoD), and regulatory compliance frameworks.
• Experience working with cybersecurity compliance reporting, risk metrics, vulnerability management, or security control monitoring.
• Strong analytical, communication, documentation, and stakeholder management skills.

Preferred Skills/Experience

• Experience with SAP S/4HANA environments and SAP security concepts.
• Knowledge of NIST, ISO 27001, COBIT, PCI‑DSS, HIPAA, or other cybersecurity and compliance frameworks.
• Experience using Integrated Risk Management (IRM), GRC Automation, or Regulatory Technology (RegTech) platforms.
• Professional certifications such as CISA, CRISC, CISSP, CGEIT, SAP GRC, Security+, or SailPoint certifications.
• Experience developing compliance dashboards and executive‑level reporting.
• Knowledge of vulnerability management tools and remediation tracking processes.
• Experience supporting large‑scale audit programs across complex enterprise environments.
• Proven track record of driving process improvements and compliance automation initiatives.
• Technical experience across SAP Basis, HANA/Oracle/MSSQL database administration, SAP BusinessObjects, Linux administration, and Windows administration.
• Platform experience across SAP RISE, SAP Business Technology Platform (BTP), and other SAP SaaS deployments.
• Experience with hyperscaler platforms, including Microsoft Azure and Google Cloud Platform (GCP).
• Advanced Identity and Access Management experience, including SSO/MFA and authentication protocols or technologies such as OpenID, SAML, Kerberos, SPNego, LDAP, Active Directory, Okta, and SAP Identity Provider.
• Privileged Access Management experience across OS, database, and application layers in SAP and non‑SAP environments, including CyberArk.
• Expertise in Identity Governance and Administration (IGA), SAP GRC, and SailPoint.
• Experience with SOX/SOC controls across OS, database, and application layers in SAP and non‑SAP environments.

At McKesson, we care about the well‑being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well‑being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long‑term incentive opportunities may be offered.

Our Base Pay Range for this position

€56,300 - €93,800