Summary
About the Role
The role will provide expert advice to superiors for SoD and BCA risk reduction and user access management through SAP roles across the organization.
Key responsibilities:
- Work closely with the SoD and BCA Risk Owners to complete Segregation of Duties and Critical Action reviews effectively and timely.
- Drive continuous access controls improvement, define and implement solutions.
- Reduce the overall number of SoD conflicts across SAP roles, systems and users.
- Continuously share the latest access controls updates, standard processes and access controls findings with both FC&C as well as non-FC&C community, train role owners and risk owners on access controls
- Ensure transparent, reliable and agile stakeholder management People management, incl. ensuring a high-performance work culture.
- Ensure workload balancing of the team supporting multiple initiatives, solid focus on Continuous Improvement initiatives, support support transitions and knowledge transfer, monitoring critical deliverables.
- Own controls, process and system expertise from SOD OPs perspective, continuously enrich process knowledge through partnering with IT, Business and FC&C community.
- Support in ensuring Low number of internal control deficiencies, Timely reporting of the control deficiencies to local and global stakeholders ,Maintain and improve customer service, Adherence to SOX timelines and SOX 404 attestation processes ,Internal and external audits, if required and support for remediation of agreed action.
Essential Requirements:
- Degree in Finance or Engineering with experience in SAP access management
- SAP GRC AC Certified. Information System Auditor (CISA) / Information Security Manager (CISM) Certification
- 4-8 years of post-qualification experience (incl. IT Application Controls and SAP GRC, SAP security
Desirable Requirements:
- Experience in S/4 HANA
- Knowledge of SAP GRC Access Controls (e.g. definition of org rules, reporting, ad-hoc analysis) and SAP authorization concepts primarily in ECC
- Knowledge on SAP role design, SAP transactions, risk & role ownership, and have a good understanding of business processes in SAP environment from access and process controls perspective.
- Prior working experience in a large Audit firm or IT organization would be a plus.
Why Novartis: Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture
You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards
Commitment to Diversity and Inclusion:
Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/en_US/network
Why Novartis: Helping people with disease and their families takes more than innovative science. It takes a community of smart, passionate people like you. Collaborating, supporting and inspiring each other. Combining to achieve breakthroughs that change patients’ lives. Ready to create a brighter future together? https://www.novartis.com/about/strategy/people-and-culture
Join our Novartis Network: Not the right Novartis role for you? Sign up to our talent community to stay connected and learn about suitable career opportunities as soon as they come up: https://talentnetwork.novartis.com/network
Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.
