Strategic SOX & GRC Compliance Analyst

McKesson’s Corporate; Cork; On-site; EUR 56,000 - 94,000; Full time

Job summary

McKesson is seeking an experienced IT Governance, Risk & Compliance professional to administer SAP GRC solutions, support SOX ITGC testing, and drive IAM processes with SailPoint. You will collaborate with Information Security to maintain robust controls and deliver executive risk reporting.

You will coordinate audits, manage remediation plans, and identify opportunities to improve governance and automation across the GRC program, ensuring regulatory compliance and strong risk management across

Qualifications

• 4+ years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, SOX Compliance, Cybersecurity Compliance, Identity & Access Management, or related fields.
• Bachelor's degree in Information Systems, Information Security, Computer Science, Accounting, Risk Management, Business Administration, or a related field; or equivalent combination of education and experience.
• Hands‑on experience administering SAP GRC Access Control and/or SAP Process Control.
• Experience performing SOX controls testing, audit support, evidence collection, and compliance documentation.
• Experience supporting SailPoint Identity Governance & Administration (IGA) or similar IAM platforms.
• Knowledge of IT General Controls (ITGC), access governance, Segregation of Duties (SoD), and regulatory compliance frameworks.
• Experience working with cybersecurity compliance reporting, risk metrics, vulnerability management, or security control monitoring.
• Strong analytical, communication, documentation, and stakeholder management skills.

Responsibilities

• Administer and support SAP GRC Access Control and Process Control solutions, including user provisioning, access requests, emergency access management, and Segregation of Duties (SoD) monitoring.
• Execute SOX ITGC and automated control testing activities, including evidence collection, documentation, validation, and issue tracking.
• Support SailPoint Identity Governance & Administration (IGA) processes, user access reviews, certification campaigns, role management, and provisioning workflows.
• Develop and maintain cybersecurity compliance dashboards, risk reports, vulnerability tracking metrics, and executive reporting.
• Partner with Information Security teams to monitor remediation efforts for identified vulnerabilities and control deficiencies.
• Coordinate internal and external audit activities, provide audit evidence, and support walkthroughs and testing requests.
• Track control exceptions and drive remediation plans through closure while ensuring compliance with internal policies and regulatory requirements.
• Identify opportunities to improve governance, compliance, automation, and operational effectiveness across GRC processes.

Skills

GRC experience

SOX / ITGC

IAM / Access Management

Audit support

Education

Bachelor's degree in Information Systems or related field

Tools

SAP GRC

SailPoint

Job description

McKesson is seeking an experienced IT Governance, Risk & Compliance professional to administer SAP GRC solutions, support SOX ITGC testing, and drive IAM processes with SailPoint. You will collaborate with Information Security to maintain robust controls and deliver executive risk reporting.

You will coordinate audits, manage remediation plans, and identify opportunities to improve governance and automation across the GRC program, ensuring regulatory compliance and strong risk management across