Empowering healthcare starts with you. At McKesson, whether you work in HR or marketing, finance or public affairs, you're making a difference. You'll spark a chain reaction that results in millions of people getting more from their healthcare.
As the nation's leading healthcare services company, we touch virtually every aspect of healthcare. We empower our customers by delivering vital supplies and solutions. And we empower our employees through a supportive environment where opportunity and responsibility grow. Our exceptional leadership team provides the vision and strategy to advance healthcare, so you can feel confident in our direction and your future. At McKesson, we believe we can empower healthcare. And it all starts with you.
Risk and Controls Group (RCG) IT manager responsible for providing sustainable, effective, and efficient processes for ongoing Sarbanes Oxley (SOX) compliance. Primarily responsible for validating that the appropriate control structure is in place to provide reasonable assurance that McKesson’s financial statements are materially accurate and complete.
Develops a sustainable process to manage McKesson's ongoing responsibilities associated with the Sarbanes-Oxley Act of 2002;
Trains management of relevant business units in regards to their ownership of the process and performance of self-assessments;
Department serves as a liaison between the business units, corporate Information Technology (IT), finance & accounting, and the external auditors in all aspects of Sarbanes-Oxley;
Monitors control design and operating effectiveness;
Assists management in developing remediation plans to address deficiencies; and
Ensures that changes to the strategy and structure of assigned business units are evaluated for the potential impact to Sarbanes-Oxley responsibilities.
Sarbanes-Oxley/ Compliance Responsibilities
Maintain an intermediate understanding of Sarbanes-Oxley legislation, PCAOB Standards, and other relevant guidance issued regarding Section 404 and the impact to the IT environment;
Manage positive and collaborative relationship between corporate IT, business unit IT departments and the RCG;
Obtain an in-depth knowledge of the McKesson systems, network infrastructure, underlying technologies and security controls within the assigned business units;
Collaborate with other RCG managers to establish Sarbanes-Oxley plans and objectives, specific to application controls;
Assist in the design and approach of each IT department's test of controls;
Support the development and implementation of each IT department's self-assessment of general computer controls;
Lead and perform procedures to examine the effectiveness of IT general controls;
Document testing performed in a clear and concise manner using standardized application tools and document templates;
Identify gaps in control design and control operative effectiveness of IT general and application controls and assist IT management with related remediation measures;
Monitor implementation and completion of remediation efforts;
Monitor corporate IT and business unit creation and maintenance of IT process documentation to ensure documentation exists for all relevant processes and is updated in a timely manner with changes to systems, general controls or application specific controls;
Regularly interact with senior management or executive levels on matters concerning status of Sarbanes-Oxley procedures performed and issues identified; and
Assist the department in the use of computer assisted audit techniques, as necessary.
Able to connect top level strategy with IT general and application controls;
Supports assigned business units with the continuous evaluation and strategic improvement of its IT environment;
Maintain an intermediate understanding of internal and external strategic goals, strategy implications for the unit(s) supported, including existing McKesson processes and current initiatives;
Assist IT management's development of plans for continuous improvement of controls;
Detailed knowledge of customer processes and financial/IT process pain points;
Problem solving and delivering cost effective solutions;
Manage RCG's value adding projects for its business unit customers; and
Create value adding business partnership with RCG BU customers.
10+ years audit or related experience
Must have Sarbanes-Oxley Internal Audit testing experience.
Experience with auditing application controls.
Strong interpersonal skills to build/ maintain ongoing business relationships;
Able to exercise professional judgment within defined procedures;
Able to apply concepts of materiality to testing and evaluation of results;
Able to independently evaluate the effectiveness of controls to prevent errors in financial reporting;
Performs all job responsibilities with integrity;
Effective communications skills with personnel from any grade level;
Thorough knowledge of auditing policies, practices, and systems;
General understanding of Sarbanes Oxley legislation and PCAOB Standard #5;
Thorough knowledge of general computer controls related to operations, information security and change management of systems software, application source code, network, and system database technologies;
Intermediate knowledge of automated and manual application controls;
Understanding of the SSAE 16 auditing standard is preferred; and
Understanding of process improvement and best practices.
Undergraduate degree in business, accounting, IT, internal audit or related field with focus on information systems or equivalent work experience.
CPA, CIA, CISA or Six Sigma certification preferred
General Office Demands
We believe you should be rewarded for the important work you do. For that reason, you'll receive a competitive compensation and benefits package when you join our team.
It starts with you. That's a simple sentence but it says a lot. It reminds each one of us that what we do matters. Every single McKesson employee contributes to our mission - whatever your title, whatever your role, you act as a catalyst in a chain of events that helps millions of people all over the globe. By connecting and improving the business of healthcare, we're helping to ensure that millions of patients get the treatment they need. And by choosing a career with McKesson, you'll join a team of passionate people working together to improve lives and advance healthcare.
At McKesson, we believe we can empower healthcare. And it all starts with you.
As an equal opportunity employer, McKesson Corporation unites the talents and contributions of all to advance the power of healthcare. Learn more about our opportunities at mckesson.com/careers
No agencies please.
McKesson - 13 months ago
McKesson moves medicine. As a top pharmaceuticals distributor in North America, McKesson delivers prescription and generic drugs, as well as...