GAM Compliance Specialist

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

The GAM Compliance Specialist will be responsible for Global Access Management (GAM) governance over applicable information technology controls and compliance activities related to relevant policies and procedures across supported J&J organizations.

The GAM Compliance Specialist will also be responsible for performing reviews of system access for users of ERP and non-ERP systems. The specialist ensures there are appropriate mitigating controls for identified segregation of duties (SOD) conflicts and acts as Subject Matter Expert (SME) for GAM governance and related projects/ due diligence.

• Review completeness and appropriateness of access/change/removal requests from business users.
• Review access requests against the role matrix/library and ensure approvers are correct based on the approval matrix.
• Perform Segregation of Duties (SOD) review to ensure the access requested does not conflict with existing access and manual job responsibilities.
• Assigning/documenting appropriate mitigating controls on new/existing valid/accepted SOD conflicts.
• Prepare weekly movement reports to ensure that the system access of transferred employees is up-to-date and the system access of terminated users is revoked on time.
• Perform access and SOD recertifications periodically and ensure remediations are completed on time.
• Perform accurate and on-time segregation of duties (SOD) assessments by establishing tools and guidelines to ensure that mitigating control libraries and SOD rulesets are up-to-date and complete.
• Prepare and update SOPs and Work Instructions documentation.
• Support internal and external audits related to access management controls through the preparation of supporting documentation and conducting walkthroughs.
• Lead /assist in IT access management controls and GAM refresher training and provide continuous support to business reviewers/approvers and related process owners.

• Perform/ assist due diligence reviews (e.g., role mapping and SOD assessment) and manage access deployment to stakeholders in projects involving process migrations/transitions.
• Support and understand the business by monitoring risks related to organization, technology, and process changes to ensure that the system roles remain appropriate.
• Provide access management compliance insights and suggest best practices that are value-adding to the business.
• Identify, design, and execute process improvements/ solutions related to compliance domains.

• University Degree in Finance, Business Management, IT or related field
• At least 3-5 years experience in audit/ compliance/ risk management or a similar job
• Professional Certification/s (e.g. CISA, CPA) is an advantage

• Proficient in basic MS Office applications (Excel, Outlook, Powerpoint, Word)
• Experience working on complex projects, with variable stakeholders and within tight deadlines.
• Planning, time management skills.
• Good English oral & written communication, presentation & training skills

• Proficient in basic MS Power tools (Powerapps, PowerBI, PowerAutomate, UIPath, Alteryx)
• Working knowledge of SAP (or other ERPs)
• Experience working in a multi-national shared services corporation
• Able to communicate in Korean, Spanish, Portuguese, Mandarin and/or Japanese.

Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.