SOX & GRC Compliance Analyst (SAP & IAM)

McKesson; Cork; Hybrid; EUR 56,000 - 94,000; Full time

Job summary

McKesson is seeking a SOX and Compliance Analyst to support enterprise governance, risk, and compliance initiatives across SAP, Identity Governance, Cybersecurity, and Internal Controls. This role administers SAP GRC platforms, supports SOX compliance activities, manages SailPoint-based user access governance, and partners with auditors to strengthen control environments.

The ideal candidate combines technical GRC expertise with analytical problem-solving to improve control effectiveness and

Qualifications

• 4+ years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, SOX Compliance, Cybersecurity Compliance, Identity & Access Management, or related fields.
• Bachelor’s degree or equivalent in a relevant field.
• Hands-on experience administering SAP GRC Access Control and/or SAP Process Control.
• Experience performing SOX controls testing, audit support, evidence collection, and compliance documentation.
• Experience supporting SailPoint Identity Governance & Administration (IGA) or similar IAM platforms.
• Knowledge of IT General Controls (ITGC), access governance, SoD, and regulatory frameworks.
• Experience with cybersecurity compliance reporting, risk metrics, vulnerability management, or security control monitoring.
• Strong analytical, communication, documentation, and stakeholder management skills.

Responsibilities

• Administer SAP GRC Access Control and Process Control solutions, including user provisioning and SoD monitoring.
• Conduct SOX ITGC and automated control testing, evidence collection, documentation, and issue tracking.
• Support SailPoint IGA processes, reviews, certification campaigns, role management, and provisioning workflows.
• Develop cybersecurity compliance dashboards, risk reports, and executive-level metrics.
• Collaborate with Information Security to monitor remediation of vulnerabilities and control deficiencies.
• Coordinate audit activities, provide evidence, and support walkthroughs and testing requests.
• Track control exceptions and drive remediation through closure, ensuring policy compliance.
• Identify opportunities to improve governance, compliance, automation, and operational effectiveness across GRC.

Skills

GRC & IT Audit

SOX Compliance

Identity & Access Management

Cybersecurity Compliance

Regulatory Compliance

Stakeholder Management

Education

Bachelor's degree in Information Systems / Information Security / Computer Science / Accounting / Risk Management / Business Administration

Tools

SAP GRC Access Control

SAP Process Control

SailPoint Identity Governance

IT General Controls (ITGC)

Job description

McKesson is seeking a SOX and Compliance Analyst to support enterprise governance, risk, and compliance initiatives across SAP, Identity Governance, Cybersecurity, and Internal Controls. This role administers SAP GRC platforms, supports SOX compliance activities, manages SailPoint-based user access governance, and partners with auditors to strengthen control environments.

The ideal candidate combines technical GRC expertise with analytical problem-solving to improve control effectiveness and