Jobs → Operations → SOX Program Operations Manager

About the Role We are seeking a senior SOX Program Operations Manager to lead and oversee McKesson's SOX compliance program across multiple workstreams, including SOX, SOC, Automated Control Monitoring (ACM), and QA/GRC/Readiness. This role is responsible for program governance, delivery oversight, risk management, resource planning, audit readiness, quality assurance, and executive reporting. Key Responsibilities • Own operational oversight of the SOX, SOC, ACM, and QA/GRC/Readiness workstreams. • Lead workstream leads and ensure consistent execution, accountability, quality, and reporting across teams. • Serve as the primary escalation point for delivery, audit, compliance, and resource challenges. • Oversee SOX planning, walkthroughs, testing, evidence collection, deficiency management, remediation, retesting, and audit closure activities. • Consolidate program risks, findings, quality issues, resource constraints, dependencies, and remediation efforts. • Manage capacity planning and resource allocation across workstreams. • Establish and govern SOPs, testing standards, evidence requirements, templates, dashboards, and reporting processes. • Partner with Internal Audit, External Audit, Compliance, Information Security, and Control Owners. • Drive continuous improvement, automation, and operational efficiency initiatives. • Deliver executive-level reporting on program status, risks, remediation progress, and audit readiness. Requirements • 10+ years of experience in IT Audit, SOX Compliance, IT Risk, Internal Controls, GRC, or Technology Assurance. • 5+ years leading enterprise SOX programs, audit functions, or compliance operations. • Deep knowledge of SOX 404, ITGCs, ITACs, automated controls, control testing, and remediation practices. • Hands-on experience assessing control design and operating effectiveness. • Experience managing control deficiencies, findings, risk assessments, remediation plans, and retesting activities. • Strong understanding of SOC 1, SOC 2, ACM, and continuous monitoring frameworks. • Experience leading multiple teams, workstreams, or offshore delivery teams. • Experience building governance processes, KPIs, reporting frameworks, and audit-ready documentation. • Strong executive communication and stakeholder management skills. • Advanced Excel and data analysis capabilities. • Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Risk Management, or related field.