GAM Compliance Specialist

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at https://www.jnj.com

Job Function:

Finance

Job Sub Function:

Risk Management

Job Category:

Professional

All Job Posting Locations:

Paranaque, National Capital Region (Manila), Philippines

Job Description:

Risk Governance

• Role Design Support: Collaborate on the design of roles within the system to support effective access management

Risk Identification and Assessment

• Grant / Modify User Access: Manage user access requests, granting or modifying access as appropriate.
• IT Controls Effectiveness Review in Operations and Projects: assess the effectiveness of access controls execution.
• Re-certify Access (Access Appropriateness: Conduct periodic re-certification of access to ensure appropriateness and compliance.

Risk Mitigation and Controls

• Re-certify Access (SOD and Mitigating Controls): Conduct periodic re-certification of access to ensure appropriateness and compliance.
• Risk Controls Assessment: Review the effectiveness of current safety measures involving access, including assessing risk management and control appropriateness
• SOX 404, GAA, External Audit, and Reporting UAM Support: Provide support to internal and external auditors who review access controls

Risk Monitoring and Reporting

• Monitor User Access (Privileged Access, Terminations, Transfers): Continuously monitor user access, including privileged access, terminations, and transfers.
• Monitor Access Approvers (Terminations, Transfers): Monitor termination and transfers within user access

Technology Change Management

• Change Control and Testing of Access Risk and SOD Rulesets: Implement change controls and perform testing related to access risk and SOD.

Due Diligence and Projects

• Perform/ assist due diligence reviews (e.g., role mapping and SOD assessment) and manage access deployment to stakeholders in projects involving process migrations/transitions.
• Support and understand the business by monitoring risks related to organization, technology, and process changes to ensure that the system roles remain appropriate.
• Provide access management compliance insights and suggest best practices that are value-adding to the business.
• Identify, design, and execute process improvements/ solutions related to compliance domains.

Other tasks that may be assigned.