Job Summary

Role Purpose: The purpose of the role is to support user access security and compliance across global SAP S4 systems, while driving strategic User Access Management initiatives to support organizational growth and technological for business adaptation purposes.

JJ Creative Medicine (IM) Transcend is a global, multi-year end-to-end business transformation program aimed at modernizing foundational business processes through the implementation of SAP S/4 HANA. This program focuses on core functionalities related to SAP Manufacturing, Order to Cash, Procure to Pay, and Finance processes. The IMUAM team plays a crucial role in ensuring security requirements are designed and implemented compliantly within this program.

The GRC governance analyst will work with the UAM Governance Lead to establish and ensure a robust SAP GRC Access Control, SoD risk management, and ruleset governance framework, emphasizing accurate execution of risk analysis across role and cross-system levels, effective mitigation and ruleset updates,



and comprehensive documentation and reporting practices that ensure clarity, consistency, compliance, and audit readiness.
Key Responsibilities
Implement and support SAP GRC Access Control solutions, ensuring effective user access governance
Perform Segregation of Duties (SoD) risk analysis across:
Single role level
Composite/persona role level
Cross-system environments (where applicable)
Propose and implement ruleset updates to eliminate inherent risks
Update and maintain the mitigating control library
Produce and validate risk analysis reports using SAP GRC and supporting tools (e.g., Alteryx), ensuring data accuracy and audit readiness.
Manage the end-to-end GRC ruleset lifecycle:
Intake, assessment, and prioritization of changes
Consolidation of change requests (e.g., audit recommendations, recent tcodes, false positives/negatives)
Coordinate with key stakeholders including GRC CoE, SAP Security, Solution Delivery, a

📌 User Access Management Bengaluru
🏢 Johnson & Johnson
📍 Bengaluru