Senior SOC Compliance Analyst

at  McKesson

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

MINIMUM REQUIREMENTS

• 3+ years of experience focused on IT audit and/or compliance
• 1+ years of experience with SOC 1 or 2 reporting
• 1+ years of supervisory experience is a plus
• 1+ SOC 1 or 2 report life-cycle experience, having both SOC 1 and 2 is a plus

ADDITIONAL KNOWLEDGE & SKILLS

• Advanced knowledge of SOC 1 and 2 report life-cycle activities
• Knowledge of all activities necessary for planning, preparing, and monitoring for continued compliance with SOC 1 and 2 audit requirements
• Knowledge-level of financial, operational, and/or information technology, internal controls, identifying risks and related controls
• Understands how to perform control tests to assess the design and operational effectiveness of SOC controls
• Understands how to perform procedures to examine the effectiveness of IT and/or business process controls
• Able to identify gaps in control design and control operative effectiveness of controls and assist management with related remediation measures
• Understanding of process improvement and best practices
• Strong interpersonal, communication, and presentation skills, including formal report writing experience
• Performs all job responsibilities with integrity
• Effective communications skills with personnel from any grade level
• Advanced understanding and application of the AICPA SOC standards (e.g., SOC 2 Trust Services Criteria) is a plus

EDUCATION

• Undergraduate degree in business, accounting, IT, internal audit or related field with focus on information systems or equivalent work experience.

COMPLIANCE RESPONSIBILITIES

• Obtain an in-depth knowledge of the McKesson systems and processes underlying technologies and controls within the assigned SOC 1 and 2 reports
• Lead SOC 1 and 2 audit related discussions independently
• Responds to or assists control owners in responding to audit related requests (e.g. audit evidence, follow-ups, etc)
• Driving the timely and complete response to audit related requests
• Serves as a liaison between the business units, corporate Information Technology (IT), business unit IT departments, and the external auditors in all aspects of their assigned SOC 1 and 2 reports to ensure timely completion of SOC audits and SOC report issuance
• Maintain an understanding of AICPA SOC standards, and other relevant guidance issued regarding SOC 1 and SOC 2 and the impact to the SOC compliance environment

REMEDIATION RESPONSIBILITIES

• Assists in the coordination of remediation activities to address deficiencies
• Assists in discussions with management in developing remediation plans to address deficiencies
• Assists with monitoring of implementation and completion of remediation efforts

RELOCATION IS NOT BUDGETED FOR THIS ROLE

We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here.