GAM Compliance Specialist

Location: Bangalore, Karnataka, India

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Finance

Job Sub Function

Risk Management

Job Category

Professional

All Job Posting Locations

Bangalore, Karnataka, India

Primary Responsibilities

Risk Governance

• Role Design Support: Collaborate on the design of roles within the system to support effective access management

Risk Identification and Assessment

• Grant / Modify User Access: Manage user access requests, granting or modifying access as appropriate.
• IT Controls Effectiveness Review in Operations and Projects: assess the effectiveness of access controls execution.
• Re-certify Access (Access Appropriateness: Conduct periodic re-certification of access to ensure appropriateness and compliance.

Risk Mitigation and Controls

• Re-certify Access (SOD and Mitigating Controls): Conduct periodic re-certification of access to ensure appropriateness and compliance.
• Risk Controls Assessment: Review the effectiveness of current safety measures involving access, including assessing risk management and control appropriateness
• SOX 404, GAA, External Audit, and Reporting UAM Support: Provide support to internal and external auditors who review access controls

Risk Monitoring and Reporting

• Monitor User Access (Privileged Access, Terminations, Transfers): Continuously monitor user access, including privileged access, terminations, and transfers.
• Monitor Access Approvers (Terminations, Transfers): Monitor termination and transfers within user access

Technology Change Management

• Change Control and Testing of Access Risk and SOD Rulesets: Implement change controls and perform testing related to access risk and SOD.

Other Responsibilities

Due Diligence and Projects

• Perform/ assist due diligence reviews (e.g., role mapping and SOD assessment) and manage access deployment to stakeholders in projects involving process migrations/transitions.
• Support and understand the business by monitoring risks related to organization, technology, and process changes to ensure that the system roles remain appropriate.
• Provide access management compliance insights and suggest best practices that are value-adding to the business.
• Identify, design, and execute process improvements/ solutions related to compliance domains.

Other tasks that may be assigned.

Skills / Competencies

Live Our Credo

• Proactively raises risks and issues to leads for timely resolution.
• Responds to audit requirements with minimal support.
• Able to manage team timelines, and deliverables and communicate the objectives of project/DD Reviews
• Can share and assist others on learning the business process.

Connect Inclusively to Address Health Needs

• Requires minimal supervision in completing audit and base business-related activities.
• Provides timely feedback on progress to allow for remediation as needed.
• Can directly liaise with stakeholders with guidance from the lead.

Shape the Future of Health through Innovation

• Able to contribute improvements beyond the base business support and processes.
• Addresses impact of change to stakeholders.

Grow Self and Others to become their Best

• Nurtures good team dynamics. Understands career goals of direct reports (if any), and actively looks for opportunities to grow.
• Volunteers time and talent to support credo action plans.

Education

• University Degree in Finance, Business Management, IT or related field.

• Years of Experience
• At least 1-3 years
• Experience in audit/ compliance/ risk management or a similar job
• Experience working in a multi-national shared services corporation.

Skills

Mandatory Technical Qualifications

• Proficient in basic MS Office applications (Excel, Outlook, Powerpoint, Word)
• Experience working on complex projects, with variable stakeholders and within tight deadlines.
• Planning, time management skills.
• Good English oral & written communication, presentation & training skills

Target Skillset

(to be acquired in the role)

Desirable Technical Qualifications

• Basic understanding in the access management life cycle
• Proficient in basic MS Power tools (Powerapps, PowerBI, PowerAutomate, UIPath, Alteryx)
• Working knowledge of SAP (or other ERP's)
• Knowledge of Banking environment

Required Skills

Preferred Skills

Agility Jumps, Business Behavior, Claims Management, Communication, Compliance Frameworks, Data Reporting, Detail-Oriented, Due Diligence, Execution Focus, Financial Analysis, Financial Risk Management (FRM), Internal Controls, Process Oriented, Regulatory Environment, Risk Assessments, Risk Measurement, Sarbanes-Oxley Compliance, Teamwork