Job Summary

JJ Cutting-edge Medicine (IM) Transcend is a global, multi-year end-to-end business transformation program aimed at modernizing foundational business processes through the implementation of SAP S/4 HANA. This program focuses on core functionalities related to SAP Manufacturing, Order to Cash, Procure to Pay, and Finance processes. The IMUAM team plays a crucial role in ensuring security requirements are designed and implemented compliantly within this program.

The Implementation Audit Analyst will partner with the UAM Governance Lead to establish, execute, and sustain an implementation audit and governance framework for SAP S/4 deployments. This role will focus on ensuring audit-ready documentation, traceable control evidence, clearly defined procedures, and consistent governance practices across project and operational readiness activities. The analyst will help validate that UAM processes, controls, risks, and deliverables are sufficiently documented, reviewed, and aligned with SoX, GxP, IT compliance, privacy, and internal policy requirements to support Day 1 Go Live readiness and post-go-live operational sustainability.

Key Responsibilities

- Support implementation audit readiness by partnering with deployment, operational, compliance, and UAM teams to ensure governance processes, controls, and evidence requirements are defined, understood, and ready for each SAP S/4 go-live phase.
- Embed audit and compliance requirements into the UAM project methodology, including control checkpoints, documentation standards, evidence retention expectations, and health checks across implementation milestones.
- Perform implementation governance health checks to assess adherence to UAM strategy,



project controls, deliverable quality, remediation tracking, and readiness criteria.
- Maintain, validate, and organize audit-ready documentation, including process narratives, control evidence, decision logs, risk assessments, approvals, issue remediation, and go-live readiness artifacts.
- Provide implementation audit support for SoX, GxP, IT compliance, privacy, and internal control requirements, including preparation of evidence packages and responses to audit inquiries.
- Support implementation risk assessments focused on user access, segregation of duties, sensitive access, data migration, role design, provisioning, and operational handover risks.
- Monitor compliance with UAM controls during implementation, with particular focus on SoD, sensitive access, emergency access, role lifecycle controls, approvals, and evidence completeness.
- Support remediation tracking for governance, audit, and control gaps, ensuring issues are documented, assigned, resolved, and validated before go-live where required.
- Contribute to the UAM taxonomy, control model, and service model as they relate to implementation governance, audit readiness, operational transition, and long-term sustainment.
- Deliver audit-focused UAM governance updates, readiness summaries,



and framework materials to key stakeholders tailored to SAP S/4 implementation needs.

Experience and Skills

Required:

- Bachelor s degree in Governance, Risk Management, Compliance, Audit, Information Technology, Engineering, or a related field.
- Minimum of 5 years of experience in audit/ controls, compliance, or enterprise risk management, preferably within the Life Sciences or Pharmaceutical industry.
- 3-5 years of experience supporting IT audits, implementation audits, IT control assessments, evidence reviews, or compliance readiness activities.
- 3-5 years of experience working with regulatory and compliance frameworks such as SoX, GxP, Privacy/GDPR, ITGC, and internal control standards.
- Experience supporting large-scale system implementations, with an understanding of project lifecycle methodology, go-live readiness, operational handover, and post-go-live sustainment.
- Familiarity with user access provisioning, SAP GRC Access Control, identity management tools, access approvals, and access review processes.
- Understanding of SAP authorization concepts, SAP Security principles, role design, user lifecycle management, and access risk management.
- Understanding of SoD concepts, sensitive access risk, mitigation controls, remediation strategies, and compliance monitoring approaches.
- Understanding of risk matrices, rulesets, control mapping, data analysis, conversion,

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 User Access Management - Implementation Audit Analyst (Bengaluru)
🏢 Johnson u0026 Johnson
📍 Bengaluru