TITLE: SOX Compliance Analyst (P4) 

DESCRIPTION: 

As part of the McKesson IT SOX Compliance team, this role will support the enterprise compliance activities across technology and finance organizations.  This position is highly visible, working with all IT Service Areas and Business Units including compliance teams within IT, Finance, and external partners. The role ensures SOX internal and external teams meet testing guidelines and operational goals therein. The role ensure proper document exists year over year across the SOX landscape. The IT SOX Compliance team supports the Technology organization with global regulatory and audit coordination engagement needs. The team defines best practices, educates the organization on audit procedures, and ensures compliance. In addition, the team ensures technology audit readiness, monitors IT controls and reports findings to Technology and Finance leadership teams. The team acts as the first line of defense for SOX compliance requirements. 

Core responsibilities: 

• Review Business process control documentation and identify SOX Controls within Finance, IT and the business process areas 

• Collaborate with various workstreams to identify and collect all necessary documentation to complete SOX impact assessment and testing 

• Effective controls monitoring with internal and external partners 

• Implement testing of internal controls to identify control deficiencies 

• Oversee and support remediation activities with control owners 

• Educate control owners on effective compliance testing processes 

• Coordinate internal and external audits requests of internal controls and critical financial reporting. 

• Conduct thorough testing of internal control system to ensure its functioning as intended and in accordance with establish standards. 

• Ability to communicate/collaborate with other compliance teams within and outside the organization; and external to the company 

• Support standardization of compliance processes, risks and controls 

• Support Automation of controls testing and similar implementations 

• Establish communication with stakeholders to ensure all task owners are aware of deliverables, timelines, and milestones for the project. 

• Report on effectiveness of controls and controls testing by IT service areas.  

Experience (Required): 

• 5+ years relevant job experience (Finance Functions, Audit / Compliance, Technology and GRC implementations) 

• Knowledge in Regulatory requirements such as SOX, SOC, HIPAA, GDPR 

• Experience in GRC Tools, RCM management, and control testing tools is a nice to have 

• Explicit knowledge of IT SOX Controls is a must 

• Strong communication and presentation skills and ability to interact with Senior Management and Leadership.