{"id":2931588,"url":"https://alion.io/job/mckesson-cybersecurity-grc-analyst-sap-platform","title":"Cybersecurity GRC Analyst, SAP Platform","company":{"id":4393,"name":"McKesson","domain":"mckesson.com","url":"https://alion.io/company/mckesson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":32,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cork, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":56300,"max":93800,"currency":"EUR","period":"year","gross":null,"usd_annual":105198},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"LDAP","optional":false},{"name":"MS SQL","optional":false},{"name":"Okta","optional":false},{"name":"Oracle","optional":false},{"name":"SAP BTP","optional":false},{"name":"SAP BusinessObjects","optional":false},{"name":"Windows","optional":false},{"name":"ABAP","optional":true},{"name":"Gmail","optional":true}],"status":"live","first_seen_at":"2026-09-10T00:00:00Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-22T21:32:19Z","board_verified":true,"closed_at":null,"days_open":42,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":42},"description":"McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.\nWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.\nAt McKesson, we are advancing healthcare through innovation, integrity, and operational excellence. We are seeking an experienced Cybersecurity GRC Analyst, SAP Platform to support and strengthen our Governance, Risk, and Compliance (GRC) program. In this role, you will help ensure compliance with regulatory and internal control requirements while improving risk management processes across the enterprise.\nYou will partner with business, security, audit, and technology teams to implement and maintain effective controls, manage SAP GRC solutions, and support audit readiness. This role is ideal for a professional who combines strong technical expertise with a passion for compliance, risk reduction, and continuous improvement.\nWhat You'll Do\nAdminister and support the SAP GRC Suite, including Access Control, Process Control, and Risk Management.\nPerform Segregation of Duties (SoD) analysis, identify conflicts, and partner with stakeholders on remediation activities.\nLead User Access Reviews (UARs) and support Privileged Access Monitoring to ensure appropriate system access.\nExecute and document ITGC and SOX control testing, maintaining audit-ready evidence and compliance documentation.\nSupport internal and external audits by providing evidence, responding to inquiries, and tracking remediation activities.\nConduct risk assessments and control reviews to identify gaps and recommend improvements.\nMonitor control effectiveness, compliance metrics, and reporting to support leadership decision-making.\nPartner with cross-functional teams to strengthen governance, risk, compliance, and security practices across the organization.\nBasic Requirements\n4+ years of experience in SAP GRC, IT risk, compliance, IT audit, cybersecurity governance, or related fields.\nBachelor's degree in Information Systems, Information Security, Risk Management, Accounting, Business, or a related discipline; or equivalent experience.\nHands-on experience with SAP GRC Access Control, Process Control, or Risk Management.\nExperience performing Segregation of Duties (SoD) analysis and remediation.\nExperience conducting User Access Reviews and access governance activities.\nExperience supporting SOX compliance, ITGC testing, and audit documentation.\nStrong understanding of risk management, internal controls, and compliance frameworks.\nStrong analytical, communication, and stakeholder management skills.\nTechnical Skills and Key Experience Areas\nSAP Basis, HANA/Oracle/MSSQL DBA, Business Objects, Linux and Windows administration.\nPlatform experience across SAP RISE, SAP BTP, and other SAP SaaS deployments.\nHyperscaler platform experience including Microsoft Azure and GCP.\nAdvanced Identity and Access Management (SSO/MFA) leveraging OpenID, SAML, Kerberos, SPNego, LDAP, Active Directory, Okta, and SAP Identity Provider.\nPrivileged Access Management across OS, database, and application layers in SAP and non-SAP environments, including CyberArk.\nIGA, SAP GRC, and SailPoint expertise.\nSOX/SOC controls across OS, database, and application layers in SAP and non-SAP environments.\nPreferred Skills/Experience\nSAP security administration experience within ECC, S/4HANA, or cloud environments.\nKnowledge of Privileged Access Management (PAM) concepts and monitoring practices.\nExperience supporting regulatory, internal, or external audits.\nFamiliarity with automated controls monitoring and compliance reporting tools.\nExperience developing compliance dashboards, metrics, and management reporting.\nProfessional certifications such as CISA, CRISC, CISSP, SAP GRC, or similar.\nExperience driving control-gap remediation and continuous improvement initiatives.\nKnowledge of healthcare, pharmaceutical, distribution, or highly regulated industries.\nAt McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.\nAs part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.\nOur Base Pay Range for this position\n€56,300 - €93,800McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:\nMcKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.\nMcKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.\nMcKesson job postings are posted on our career site: careers.mckesson.com.","description_format":"text","description_chars":6118,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Health Care","Medical Equipment Distribution"],"lifecycle":[{"event":"open","at":"2026-10-20T14:46:03Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.254,"p_room":0.28,"age_days":42,"expected_fill_days":12,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":105198,"is_top_pay":false},"html_url":"https://alion.io/job/mckesson-cybersecurity-grc-analyst-sap-platform","json_url":"https://alion.io/job/mckesson-cybersecurity-grc-analyst-sap-platform.json","meta":{"generated_at":"2026-10-22T23:23:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9133,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4393},"rest":"https://alion.io/mcp/rest/get_company?id=4393"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmckesson-cybersecurity-grc-analyst-sap-platform"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmckesson-cybersecurity-grc-analyst-sap-platform"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmckesson-cybersecurity-grc-analyst-sap-platform"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mckesson-cybersecurity-grc-analyst-sap-platform\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmckesson-cybersecurity-grc-analyst-sap-platform"}]}