IT Audit Manager
Role details
Job location
Tech stack
Job description
The Internal Audit Manager will lead technology-focused audits across McKesson, with primary responsibility for IT and digital platform risks. This role provides high visibility to senior leadership and delivers independent assurance over the reliability, security, and resilience of technology that enables McKesson.
The position offers the opportunity to develop as a technology risk leader by coaching audit teams, partnering with Technology and Cybersecurity stakeholders, and delivering clear, actionable insights that inform leadership decisionmaking in a rapidly evolving environment., * Lead risk-based planning and execution of IT and technology audits, including control evaluation and audit program development across systems, platforms, and supporting processes.
- Drive end-to-end audit delivery, establishing timelines, managing dependencies, and communicating status, risks, and emerging issues to leadership.
- Partner with Technology and Cybersecurity stakeholders to align on audit observations, root causes, and practical, sustainable remediation plans.
- Assess technology risks and control effectiveness across areas such as access management, change management, system development, data governance, integrations, and third-party risk management.
- Manage and coach audit teams; document and review workpapers and deliverables to ensure technical accuracy, consistency, and alignment with Internal Audit standards.
- Document and summarize technical findings into clear, executive-ready audit reports that translate technology risk into business impact.
- Contribute to Internal Audit initiatives focused on advancing technology audit methodologies, automation, and data-enabled assurance.
Travel & Work Environment
- Travel up to 5%
- Hybrid work model with approximately 5-10 days in-office per quarter to support collaboration, connection, and team development.
Requirements
- Bachelor's degree or equivalent experience
- 7+ years of relevant experience
Critical & Preferred Skills
- Proven ability to lead complex IT or technology-focused audits while managing teams, stakeholders, and deliverables.
- Strong understanding of IT control frameworks, technology risk management, and audit methodologies.
- Ability to assess and challenge technology risks in environments with modern platforms, integrations, and rapid change.
- Excellent written and verbal communication skills, with the ability to translate technical issues into clear business implications.
- Strong relationship-building skills with Technology and Cybersecurity partners.
- Sound judgment and problem-solving skills in ambiguous or complex situations.
- Growth mindset with comfort operating in a dynamic, evolving technology landscape.
- Experience with data analytics or audit automation tools is a plus.
Education & Certifications
- Bachelor's degree in Information Systems, Computer Science, or other related field (required)
- CISA, CISSP, CIA, or other relevant professional certification (preferred)
Additional Information
- Must be authorized to work in the United States
- Sponsorship is not available for this position
Benefits & conditions
We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, pleaseclick here.
Our Base Pay Range for this position $109,500 - $182,500
McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:
McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.
McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.
McKesson job postings are posted on our career site: careers.mckesson.com.
