{"id":2931587,"url":"https://alion.io/job/mckesson-sox-and-compliance-analyst","title":"SOX and Compliance Analyst","company":{"id":4393,"name":"McKesson","domain":"mckesson.com","url":"https://alion.io/company/mckesson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":35,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cork, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":56300,"max":93800,"currency":"EUR","period":"year","gross":null,"usd_annual":105198},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Active Directory","optional":true},{"name":"Azure","optional":true},{"name":"CyberArk","optional":true},{"name":"GCP","optional":true},{"name":"Gmail","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"LDAP","optional":true},{"name":"Linux","optional":true},{"name":"MS SQL","optional":true},{"name":"Okta","optional":true},{"name":"Oracle","optional":true},{"name":"PCI DSS","optional":true},{"name":"SAP BusinessObjects","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-10T00:00:00Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-29T10:37:53Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.\nWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.\nMcKesson is seeking a SOX and Compliance Analyst to support enterprise governance, risk, and compliance initiatives across SAP, Identity Governance, Cybersecurity, and Internal Controls. This role will be responsible for administering SAP GRC platforms, supporting SOX compliance activities, managing user access governance processes through SailPoint, producing cybersecurity compliance reporting, and partnering with internal and external auditors to strengthen the organization's control environment.\nThe ideal candidate combines technical expertise, compliance knowledge, and analytical problem-solving skills to improve control effectiveness, reduce risk, and support regulatory compliance across the enterprise. This position operates within McKesson's Governance, Risk, and Compliance (GRC) organization and collaborates with Information Security, Internal Audit, Application Teams, and Business Stakeholders.\nWhat You'll Do\nAdminister and support SAP GRC Access Control and Process Control solutions, including user provisioning, access requests, emergency access management, and Segregation of Duties (SoD) monitoring.\nExecute SOX ITGC and automated control testing activities, including evidence collection, documentation, validation, and issue tracking.\nSupport SailPoint Identity Governance & Administration (IGA) processes, user access reviews, certification campaigns, role management, and provisioning workflows.\nDevelop and maintain cybersecurity compliance dashboards, risk reports, vulnerability tracking metrics, and executive reporting.\nPartner with Information Security teams to monitor remediation efforts for identified vulnerabilities and control deficiencies.\nCoordinate internal and external audit activities, provide audit evidence, and support walkthroughs and testing requests.\nTrack control exceptions and drive remediation plans through closure while ensuring compliance with internal policies and regulatory requirements.\nIdentify opportunities to improve governance, compliance, automation, and operational effectiveness across GRC processes.\nBasic Requirements\n 4+ years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, SOX Compliance, Cybersecurity Compliance, Identity & Access Management, or related fields.\nBachelor's degree in Information Systems, Information Security, Computer Science, Accounting, Risk Management, Business Administration, or a related field; or equivalent combination of education and experience.\nHands-on experience administering SAP GRC Access Control and/or SAP Process Control.\nExperience performing SOX controls testing, audit support, evidence collection, and compliance documentation.\nExperience supporting SailPoint Identity Governance & Administration (IGA) or similar IAM platforms.\nKnowledge of IT General Controls (ITGC), access governance, Segregation of Duties (SoD), and regulatory compliance frameworks.\nExperience working with cybersecurity compliance reporting, risk metrics, vulnerability management, or security control monitoring.\nStrong analytical, communication, documentation, and stakeholder management skills.\nPreferred Skills/Experience\nExperience with SAP S/4HANA environments and SAP security concepts.\nKnowledge of NIST, ISO 27001, COBIT, PCI-DSS, HIPAA, or other cybersecurity and compliance frameworks.\nExperience using Integrated Risk Management (IRM), GRC Automation, or Regulatory Technology (RegTech) platforms.\nProfessional certifications such as CISA, CRISC, CISSP, CGEIT, SAP GRC, Security+, or SailPoint certifications.\nExperience developing compliance dashboards and executive-level reporting.\nKnowledge of vulnerability management tools and remediation tracking processes.\nExperience supporting large-scale audit programs across complex enterprise environments.\nProven track record of driving process improvements and compliance automation initiatives.\nTechnical experience across SAP Basis, HANA/Oracle/MSSQL database administration, SAP BusinessObjects, Linux administration, and Windows administration.\nPlatform experience across SAP RISE, SAP Business Technology Platform (BTP), and other SAP SaaS deployments.\nExperience with hyperscaler platforms, including Microsoft Azure and Google Cloud Platform (GCP).\nAdvanced Identity and Access Management experience, including SSO/MFA and authentication protocols or technologies such as OpenID, SAML, Kerberos, SPNego, LDAP, Active Directory, Okta, and SAP Identity Provider.\nPrivileged Access Management experience across OS, database, and application layers in SAP and non-SAP environments, including CyberArk.\nExpertise in Identity Governance and Administration (IGA), SAP GRC, and SailPoint.\nExperience with SOX/SOC controls across OS, database, and application layers in SAP and non-SAP environments.\nAt McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.\nAs part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.\nOur Base Pay Range for this position\n€56,300 - €93,800McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:\nMcKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.\nMcKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.\nMcKesson job postings are posted on our career site: careers.mckesson.com.","description_format":"text","description_chars":7146,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Security Compliance","Pharmaceutical Distribution","Medical Equipment Distribution"],"lifecycle":[{"event":"open","at":"2026-10-20T14:46:03Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.379,"p_room":0.28,"age_days":49,"expected_fill_days":20,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":105198,"is_top_pay":false},"html_url":"https://alion.io/job/mckesson-sox-and-compliance-analyst","json_url":"https://alion.io/job/mckesson-sox-and-compliance-analyst.json","meta":{"generated_at":"2026-10-29T15:23:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23059,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4393},"rest":"https://alion.io/mcp/rest/get_company?id=4393"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmckesson-sox-and-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmckesson-sox-and-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmckesson-sox-and-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mckesson-sox-and-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmckesson-sox-and-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2931587}},{"tool":"search_jobs","arguments":{"company":"mckesson.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2931587},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}