SOC Compliance Senior Analyst at McKesson Alpharetta, GA

McKesson is seeking a SOC Compliance Senior Analyst to support the SOC Compliance team in managing multiple SOC audits and ensuring timely report delivery across a complex enterprise.

• Supervision and Leadership – Supervise and mentor less experienced personnel, including temporary outside workers; assist with onboarding, integration, and training of new team members; foster a positive and collaborative relationship between corporate IT, business unit IT departments, Enterprise Financial Controls, and IT Compliance.
• SOC Report Management – Assist in managing McKesson’s ongoing responsibilities associated with the issuance of SOC 1 and SOC 2 reports; lead SOC 1 and SOC 2 audit‑related discussions independently; serve as liaison between business units, corporate IT, business unit IT departments, and external auditors to ensure timely completion and issuance of SOC reports.
• Compliance Oversight – Obtain in‑depth knowledge of McKesson systems, processes, underlying technologies, and controls relevant to SOC 1 and SOC 2 reports; respond to or assist control owners in responding to audit‑related requests (e.g., audit evidence, follow‑ups); maintain a strong understanding of AICPA SOC standards.
• Remediation and Issue Resolution – Assist in coordinating remediation activities to address identified deficiencies; support discussions with management to develop effective remediation plans; monitor implementation and completion of remediation efforts.
• Project and Status Reporting – Assist in providing regular status updates on accomplishments, next steps, and key issues to governance and program teams; contribute to the development of detailed project plans, including risk identification and mitigation strategies; track and report on key performance indicators and success metrics for SOC compliance efforts.

• A degree or equivalent and typically requires 7+ years of relevant experience.

• 3+ years of experience focused on IT audit and/or compliance.
• 1+ years of experience with SOC 1 or 2 reporting.
• 1+ years of supervisory experience is a plus.
• 1+ SOC 1 or 2 report life‑cycle experience; having both SOC 1 and 2 is a plus.

• Advanced knowledge of SOC 1 and 2 report life‑cycle activities.
• Knowledge of all activities necessary for planning, preparing, and monitoring for continued compliance with SOC 1 and 2 audit requirements.
• Knowledge‑level of financial, operational, and/or information technology, internal controls, identifying risks and related controls.
• Understands how to perform control tests to assess the design and operational effectiveness of SOC controls.
• Understands how to perform procedures to examine the effectiveness of IT and/or business process controls.
• Able to identify gaps in control design and control operative effectiveness of controls, and assist management with related remediation measures.
• Understanding of process improvement and best practices.
• Strong interpersonal, communication, and presentation skills, including formal report writing experience.
• Performs all job responsibilities with integrity.
• Effective communication skills with personnel from any grade level.
• Advanced understanding and application of the AICPA SOC standards (e.g., SOC 2 Trust Services Criteria) is a plus.

• CISA, CISSP, CPA, or CIA preferred.

Please note that only candidates authorized to work in the United States will be considered for this position. Sponsorship is not available.

Relocation assistance is not budgeted for this role.

Our Base Pay Range for this position: $115,500 – $192,500.

McKesson is an Equal Opportunity Employer. McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson’s full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page.