Johnson & Johnson is looking for a Financial IT Compliance Analyst to be based in Paranaque, PH, whose roles include, but are not limited to:
User Access Management:
Review access/change request form for completeness;
Review access request against the role matrix/library and ensure approvers are correct based on the approval matrix;
Perform Segregation of Duties (SOD) checks ensuring access requested does not have a conflict with existing access and manual job responsibilities;
Provisioning of system access based upon the approved access request form (e.g. Bravo, Adobe Workflow, SAP Galaxy, SharePoint, etc.);
Review weekly movement reports ensuring transfer employee's system access is up-to-date and terminated user's system access is revoked on time;
Raise access termination requests;
Extract the User Access data from the source systems ensuring that the data is complete and accurate;
Obtain access report from respective IT/Admin;
Prepare and send to reviewers the user appropriateness and SOD reports ensuring the reports remain complete, accurate, and include the necessary information for the reviewer to execute the review control;
Monitor the review progress to ensure that reviewers complete the review in a timely manner;
Escalate reviews to the reviewer's supervisor and leadership if the reviewer is not able to complete the review. In addition, provide help and support for questions in performing the review;
Gather results from the reviewers and create an action plan to remove and/or change access for any users whose access is no longer appropriate;
Perform immediate action based on the reviewer's feedback and concern, ensuring that the user access re-certification is completed on time including the action plan; and
Serve as main support of the review process including automated access review (NAGS)
Access Approver Management:
Identify appropriate access approvers (i.e. role owner, compliance manager);
Monitor the lists of access approvers;
Serve as main support of the review process including automated access review (NAGS);
Perform immediate action based on the reviewer's feedback and concerns
Ensure that user access re-certification is completed on time;
Provide training and continuous support to business reviewers/approvers and related process owners through conduct of IT SOX and Global Access Management refresher training. This is to ensure that they understand the process and are performing the control appropriately;
Request assignment of Access Approvers (Role Approvers, Compliance Approvers, Mitigating Control Approvers) ensuring that access is requested appropriately and efficiently; and
Other related matters that may be assigned.
Qualifications
At least a degree in IT or finance related fields or equivalent with professional certifications (e.g. CPA);
At least 2 years work experience with a comprehensive understanding of SOX and compliance, internal risk assessment and user access management;
Excellent communication skills (read, write, speak English fluently);
Flexibility to adapt to needs of diverse cultures and business disciplines;
Ability to prioritize own workload;
Display of ownership of tasks and deliverables, coupled with a sense of urgency to meet deadlines and timetables;
Ability to work and communicate with management on resolutions of issues or decision making;
Experience in audit/finance is highly preferred;
Willing to be assigned in Parañaque City, Metro Manila
Primary LocationPhilippines-National Capital-Manila-OrganizationJohnson & Johnson International (Singapore) Pte. Ltd. - ROHQJob FunctionQualityRequisition ID1905793553W
