Enterprise Compliance SOX Lead Analyst

September 20

Apply Now

Receive Emails with Similar Jobs

McKesson

WebsiteLinkedInAll Job Openings

Pharmaceutical Distribution • HealthCare IT • Practice Management • Supply Chain Management • Medication Adherence

10,000+

Description

• Support the enterprise compliance activities across technology and finance organizations • Ensure SOX internal and external teams are following operating procedures, guidelines and processes • Facilitate metrics tracking, budget, tooling, and controls monitoring stabilization • Support the IT organization with global regulatory and audit coordination engagement needs • Define best practices, educate the organization on audit procedures, and ensure compliance • Ensure proper documentation of evidence for SOX • Provide recommendations to senior leadership on resource utilization, processes, and technologies to enable the organization to deliver on strategy

Requirements

• Bachelor’s degree in a relevant technology field or equivalent combination of education and work experience • MBA or equivalent preferred • 7 + years of professional experience in Compliance, Cybersecurity, Governance, Risk, or Operations senior level role with 5 + years of leading security programs • 5 + years of engineering or other IT work experience relevant to the position • Demonstrable experience with compliance frameworks and security risk management (e.g., ISO, NIST, HITRUST, GDPR, HIPAA, PCI) • Strong communication, problem-solving and willingness to work in a highly collaborative environment • Solid understanding and significant experience with modern software development practices, tools, and/or hardware technologies • Solid understanding of IT security best practices • Experience with enterprise GRC management platforms (e.g., ServiceNow, OneTrust); implementation experience a plus • Experience in healthcare or biotech industries • Demonstrable experience building security roadmaps and plans to address identified risks • Experience developing cybersecurity metrics and reporting involving various areas and stakeholders • Excellent communication skills, appropriately adapting based on audience needs, through all mediums–verbally, written, presentation, and listening • Relevant certification(s) in the field of cybersecurity, risk, audit, or program/project management

Benefits

• Competitive compensation package as part of Total Rewards • Annual bonus or long-term incentive opportunities may be offered