Operations Manager, SOX and Compliance

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

McKesson is seeking an Operations Manager, SOX and Compliance to support and enhance the organization's compliance and internal controls environment. This role will lead key operational activities within the SOX compliance program, administer SAP GRC workflows, coordinate audit support activities, monitor compliance metrics, and partner with stakeholders across the business to drive accountability and continuous improvement.

The ideal candidate combines expertise in SOX compliance, SAP GRC, audit coordination, and cross-functional collaboration to help ensure regulatory compliance, effective risk management, and operational excellence.

What You'll Do

• Manage SOX compliance program operations, including annual planning, testing schedules, milestone tracking, and stakeholder coordination.
• Administer SAP GRC workflows, access certification campaigns, user access reviews, and remediation activities.
• Coordinate internal and external audit activities, including evidence collection, documentation management, and audit request tracking.
• Monitor compliance KPIs, control testing progress, remediation status, and program performance metrics.
• Prepare compliance dashboards, executive status reports, and risk summaries for leadership review.
• Facilitate cross-functional communication among Internal Audit, IT, Security, Finance, and business stakeholders.
• Escalate risks, control deficiencies, and compliance issues while supporting timely remediation efforts.
• Drive process improvements that enhance compliance effectiveness, audit readiness, and operational efficiency.

Basic Requirements

• 4+ years of experience in SOX compliance, internal controls, audit, risk management, GRC, or related compliance functions.
• Bachelor's degree in Business, Accounting, Information Systems, Risk Management, Finance, or a related field, or equivalent experience.
• Hands-on experience supporting SOX controls testing, compliance programs, or audit activities.
• Experience administering SAP GRC workflows, access controls, user access reviews, or access certification processes.
• Experience coordinating audit requests, evidence collection, and compliance documentation.
• Knowledge of regulatory compliance frameworks, internal controls, and risk management principles.
• Strong reporting, analytical, and problem-solving skills.
• Ability to manage multiple priorities while partnering effectively with cross-functional stakeholders.

Technical Skills and Key Experience Areas

• SAP Basis, HANA, Oracle, MSSQL DBA, Business Objects, Linux, and Windows administration.
• Platform experience across SAP RISE, SAP BTP, and other SAP SaaS deployments.
• Hyperscaler platform experience, including Microsoft Azure and GCP.
• Advanced Identity and Access Management experience with SSO and MFA leveraging OpenID, SAML, Kerberos, SPNego, LDAP, Active Directory, Okta, and SAP Identity Provider.
• Privileged Access Management across OS, database, and application layers in SAP and non-SAP environments, including CyberArk.
• IGA, SAP GRC, and SailPoint expertise.
• SOX and SOC controls experience across OS, database, and application layers in SAP and non-SAP environments.

Preferred Skills/Experience

• Experience with SAP GRC Access Control, Access Risk Analysis, and Emergency Access Management.
• Knowledge of IT General Controls (ITGCs), Segregation of Duties (SoD), and access governance processes.
• Experience supporting internal or external auditors in regulated environments.
• Familiarity with compliance automation, governance platforms, and reporting tools.
• Advanced Excel, data analysis, and KPI/dashboard reporting skills.
• Experience developing process documentation and operating procedures.
• Project coordination or compliance program management experience.
• Relevant certifications such as CISA, CRISC, CIA, CPA, SAP GRC, or equivalent.

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.  In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. 

Our Base Pay Range for this position

€56,300 - €93,800

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.