Sr. Technology Compliance Analyst
About The Position
The Senior Technology Compliance Analyst leads and executes complex IT audits across McKesson’s technology environment, assessing internal controls and compliance with applicable regulations. The role calls for technical expertise, leadership, and clear communication of audit findings to stakeholders. The analyst contributes throughout audit engagements, including planning, scoping, risk assessment, execution, and reporting. They evaluate IT general and application controls, identify deficiencies, recommend remediation, collaborate with external auditors, and help develop audit staff. The position also stays current with emerging technologies, IT risks, and regulatory requirements, and may support special projects and investigations.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Accounting, Finance, or a related field, or equivalent experience.
- At least 8 years of progressive experience in IT audit, information security, or a related field, including at least 3 years in a leadership or lead role.
- Strong understanding of IT audit methodologies, frameworks such as COBIT and NIST, and regulatory compliance such as HIPAA and CCPA.
- Demonstrated experience auditing operating systems such as Windows and Linux; databases such as SQL and Oracle; network infrastructure; cloud environments such as AWS, Azure, and GCP; and enterprise applications such as JDE.
- Excellent analytical, problem-solving, and critical-thinking skills.
- Strong written and verbal communication skills, including the ability to present complex information clearly and concisely to diverse audiences.
- Ability to lead and manage multiple projects simultaneously in a fast-paced environment.
- Ability to work independently and as part of a team.
- Strong ethical standards and commitment to integrity.
Nice To Haves
- CISA, CISSP, CRISC, or other relevant professional certifications are highly preferred.
- Experience with GRC tools such as Workiva or ServiceNow.
- Experience with data analytics tools such as Power BI, Tableau, or Looker.
- Experience with G Suite, including Docs, Sheets, and Slides.
Responsibilities
- Collaborate in planning, execution, and reporting of IT audit engagements, including scoping, risk assessment, and resource allocation.
- Develop audit programs and testing procedures for IT systems, applications, infrastructure, and processes.
- Evaluate the design and operating effectiveness of IT general controls and application controls.
- Identify control deficiencies, assess their impact, and develop practical remediation recommendations.
- Prepare audit reports for senior management that communicate findings, risks, and recommendations.
- Communicate audit results and recommendations to IT management and other business stakeholders.
- Collaborate with external auditors and support their audit activities as needed.
- Stay current with emerging IT risks, technologies, and regulatory requirements.
- Mentor and develop audit staff, providing guidance and performance feedback.
- Participate in special projects and investigations as required by the Internal Audit department.
- Apply expertise in regulatory frameworks, including Sarbanes-Oxley ITGC, SOC 1 and SOC 2 reporting, the HIPAA Security Rule, PCI DSS, and familiarity with DSCSA requirements.
- Use engineering and technical architecture skills to guide a compliant-by-design approach.
Benefits
- Competitive compensation package.
- Annual bonus or long-term incentive opportunities may be offered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
