GAM Compliance Specialist

Johnson & Johnson Co.; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Johnson & Johnson in the Philippines is seeking a GAM Compliance Specialist to govern Global Access Management (GAM) related IT controls and compliance across supported J&J organizations. You will review system access for ERP and non-ERP users, ensure proper mitigations for SOD conflicts, and act as SME for GAM governance on projects and due diligence.

The role entails performing access reviews, maintaining role matrices, supporting audits, and training business reviewers.

Qualifications

• University Degree in Finance, Business Management, IT or related field.
• 3-5 years experience in audit/compliance/risk management or a similar job.
• Professional Certification(s) (e.g. CISA, CPA) is an advantage.

Responsibilities

• Review completeness and appropriateness of access/change/removal requests from business users.
• Review access requests against the role matrix/library and ensure approvers are correct based on the approval matrix.
• Perform Segregation of Duties (SOD) review to ensure the access requested does not conflict with existing access and manual job responsibilities.
• Assign appropriate mitigating controls on SOD conflicts and document them.
• Prepare weekly movement reports for system access of transferred/terminated users.
• Perform access and SOD recertifications and ensure remediations are completed on time.
• Lead IT access management controls and GAM refresher training.

Skills

Audit & compliance knowledge

Communication

Project management

Time management

English proficiency

Education

University degree in Finance/Business/IT

Tools

SAP

PowerBI

Job description

At Johnson & Johnson,we believe health is everything. Our strength in healthcare innovation empowers us to build aworld where complex diseases are prevented, treated, and cured,where treatments are smarter and less invasive, andsolutions are personal.Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity.Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Legal & Compliance

Job Sub Function

Enterprise Compliance

Job Category

Professional

All Job Posting Locations

Taguig, National Capital Region (Manila), Philippines

Job De ion

The GAM Compliance Specialist will be responsible for Global Access Management (GAM) governance over applicable information technology controls and compliance activities related to relevant policies and procedures across supported J&J organizations.

The GAM Compliance Specialist will also be responsible for performing reviews of system access for users of ERP and non-ERP systems. The specialist ensures there are appropriate mitigating controls for identified segregation of duties (SOD) conflicts and acts as Subject Matter Expert (SME) for GAM governance and related projects/ due diligence.

Key Responsibilities

Access Management

• Review completeness and appropriateness of access/change/removal requests from business users.
• Review access requests against the role matrix/library and ensure approvers are correct based on the approval matrix.
• Perform Segregation of Duties (SOD) review to ensure the access requested does not conflict with existing access and manual job responsibilities.
• Assigning/documenting appropriate mitigating controls on new/existing valid/accepted SOD conflicts.
• Prepare weekly movement reports to ensure that the system access of transferred employees is up-to-date and the system access of terminated users is revoked on time.
• Perform access and SOD recertifications periodically and ensure remediations are completed on time.
• Perform accurate and on-time segregation of duties (SOD) assessments by establishing tools and guidelines to ensure that mitigating control libraries and SOD rulesets are up-to-date and complete.
• Prepare and update SOPs and Work Instructions documentation.
• Support internal and external audits related to access management controls through the preparation of supporting documentation and conducting walkthroughs.
• Lead /assist in IT access management controls and GAM refresher training and provide continuous support to business reviewers/approvers and related process owners.

Due Diligence and Projects

• Perform/ assist due diligence reviews (e.g., role mapping and SOD assessment) and manage access deployment to stakeholders in projects involving process migrations/transitions.
• Support and understand the business by monitoring risks related to organization, technology, and process changes to ensure that the system roles remain appropriate.
• Provide access management compliance insights and suggest best practices that are value-adding to the business.
• Identify, design, and execute process improvements/ solutions related to compliance domains.

Experience And Qualifications

Other tasks that may be assigned.

• University Degree in Finance, Business Management, IT or related field
• At least 3-5 years experience in audit/ compliance/ risk management or a similar job
• Professional Certification/s (e.g. CISA, CPA) is an advantage

Mandatory Technical Qualifications

• Proficient in basic MS Office applications (Excel, Outlook, Powerpoint, Word)
• Experience working on complex projects, with variable stakeholders and within tight deadlines.
• Planning, time management skills.
• Good English oral & written communication, presentation & training skills

Desirable Technical Qualifications

• Proficient in basic MS Power tools (Powerapps, PowerBI, PowerAutomate, UIPath, Alteryx)
• Working knowledge of SAP (or other ERPs)
• Experience working in a multi-national shared services corporation
• Able to communicate in Korean, Spanish, Portuguese, Mandarin and/or Japanese.

Johnson & Johnson is an Aff…

Preferred Skills

Audit and Compliance Trends, Audit Management, Audit Reporting, Business Behavior, Business Writing, Communication, Compliance Management, Critical Thinking, Execution Focus, Legal Function, Legal Services, Office Administration, Process Optimization, Regulatory Environment, Report Writing, Training Administration