GAM Compliance Lead

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

The Global Access Management Compliance (GAMC) Lead will be responsible for governance over applicable information technology controls and compliance activities related to relevant policies and procedures across supported J&J organizations.

In this role, the GAMC Lead will mainly handle the governance of Banks which includes online banking portals and manual signatories. The GAMC Lead will supervise with bank portal user administration, user migrations, bank account and portal closure activities, periodic access reviews, segregation of duties assessments, audit support, and banking projects. The role leads the coordination with internal stakeholders, banking partners, and process owners to maintain complete, accurate, timely, and audit-ready access records.

The GAMC Lead is expected to be flexible in handling other GAMC systems aside from Banks.

The GAMC Lead should be able to manage a small team (3-5).

• Review completeness and appropriateness of access/change/removal requests from business users

• Review access requests against the role matrix/library and ensure approvers are correct based on the approval matrix.

• Review bank portal access requests for completeness, appropriateness, and compliance with defined authorization requirements.

• Coordinate with requestors, approvers, process owners, treasury teams, and banking partners to facilitate the timely provisioning, modification, and removal of user access.

• Lead in migrating users between bank portals, entities, account structures, or authentication methods, including validating user populations, access mappings, approvals, testing, deployment, and post-migration reconciliation.

• Lead bank account and portal closure activities by confirming access removal, coordinating required documentation and approvals, tracking closure status, and retaining evidence of completion.

• Perform Segregation of Duties (SOD) reviews to ensure the access requested does not conflict with existing access and manual job responsibilities.

• Review and approve documentation of appropriate mitigating controls on new/existing valid/accepted SOD conflicts.

• Review and approve weekly movement reports to ensure that the system access of transferred employees is up-to-date and the system access of terminated users is revoked on time.

• Review/ perform access and SOD recertifications periodically and ensure remediations are completed on time.

• Review/ perform accurate and on-time segregation of duties (SOD) assessments by establishing tools and guidelines to ensure that mitigating control libraries and SOD rulesets are up-to-date and complete.

• Review and approve SOPs and Work Instructions documentation.

• Validate appropriate access profiles and appropriate approvers (e.g., bank authorizer)

• Drive discussions with internal and external auditors for audits related to access management controls (e.g., walkthroughs and documentation)

• Lead/ oversee of IT access management controls and GAM refresher training and continuous support to business reviewers/approvers and related process owners.

• Gathers key metrics and compliance results for reporting and analysis.

• Lead project for bank onboarding, portal implementation, entity integration, account rationalization, banking transitions, and other access-related initiatives.

• Lead project planning and execution by gathering requirements, validating user and account data, coordinating approvals, tracking actions and dependencies, supporting testing, and preparing status updates.

• Spearhead due diligence activities, including user population analysis, access mapping, role validation, segregation of duties assessment, and readiness reviews for migrations or transitions.

• Support cutover and stabilization activities by monitoring access deployment, validating successful user setup, reconciling results, and escalating defects or exceptions.

• Monitor risks arising from organizational, banking, technology, and process changes to help ensure that portal access and user entitlements remain appropriate.

• Drive compliance insights and recommend practical access governance practices that support business continuity while maintaining effective controls.

• Identify, design, and implement process improvements, reporting solutions, and automation opportunities for bank portal access governance and compliance activities.

• Flexible to lead the abovementioned roles to other non-bank systems.

• Ensure new team members are onboarded (knowledge transfer, team dynamics) properly to enable them to adapt and thrive in the GAMC team.

• Assign tasks and supervise a team to ensure deliverables are completed in a timely and accurate manner.

• Work with team members to create development plans that align to their career goals.

• Foster a harmonious working environment within the team.

• University Degree in Finance, Business Management, IT or related field

• At least 5 years of progressive experience in auditing in one or more of the following fields: (a) financial/operational, (b) external, (c) information systems, and (d) compliance.

• Professional Certification/s (e.g. CISA, CPA) is an advantage

• Proficient in basic MS Office applications (Excel, Outlook, Powerpoint, Word)

• Experience managing / working on complex projects, with variable stakeholders and within tight deadlines.

• Planning, prioritization, and multitasking skills.

• Good English oral & written communication, presentation & training skills

• Proactive with good interpersonal and leadership skills

• Proficient in basic MS Power tools (Powerapps, PowerBI, PowerAutomate, UIPath, Alteryx)

• Working knowledge of SAP (or other ERP's)

• Able to maximize usage of AI tools (e.g., Copilot) in daily operations

• Experience working in a multi-national shared services corporation

• Integrity

• Accountability

• Collaboration

• Leadership

• Intellectual Curiosity

• Independent Thinking

• Performance/results driven

• Strategic

• Continuously brings forth proposals for simplification of processes.

• Can respond competently to audit questions in internal meetings.

• Proactively leads and communicates issues and recommendations to the GAMC team.

• Can review business processes with a compliance mindset with guidance.

• Delivers robust training and walkthroughs in a clear and effective manner.

• Can complete base business deliverables considering complexity (not yet cleaned up)/volume) and process ownership.

• Proactively connects with stakeholders when issues arise.

• Implements improvements and/or coaches others on how to evaluate and adopt them (no matter how small)

• Develops and shares clear and concise communications to stakeholders in a timely manner.

• Finds ways to develop/expose self and/or direct reports (if applicable) to growth opportunities including pillars and/or external activities. Provides the right level of supervision to the team (if applicable).

• Provides suggestions to work on least favorable areas on the Credo Action Plans.