LDC Core Enablement Business and IT Controls Manager-SOD

Key responsibilities:

• Manage Access Risks within the business processes relevant for NFCM and in scope of LDC, in collaboration with respective LDC FC&C SPOCs. Propose updates to GRC Access Risk Library, to ensure accuracy with the identification of access conflicts.
• Support definition of strong Access governance and well-regulated Access controls to ensure minimal access conflicts (/segregation of duties).
• Analyze access risks (SOD / Critical Actions) and work closely with Business and IT teams, both within LDC as well as in respective countries, to drive necessary remediation activities to eliminate conflicts. Collaborate with Security and Authorization team, to propose optimal solutions (incl. workarounds) to manage user accesses without introducing access risks.
• Share periodical updates on access risks within roles and profiles, including progress with the remediation. Ensure applicable mitigating controls are established, as necessary.
• Leverage Compliance tool (SAP GRC Process Controls) to drive further efficiencies with the management of access controls post go-live, and contribute towards planned automation initiatives on this topic
• Support integration between Business and IT Controls topics, to enhance efficiency of compliance mainly in relation to IT Application Controls (NFCM / SOX relevant applications, interfaces, etc.)
• Support cultural change, explore new ways of working, collaborate and support the overall success of the program and execute the required changes to meet business objectives.

• University degree in Finance or related field
• Advanced degree in business, finance, or economics preferred Experience.
• Atleast 12 years of post-qualification experience primarily with SAP authorization concept (incl. S/4HANA), SAP role design, SAP GRC Access Controls, risk & role ownership
• Prior working experience in a large Audit firm, preferably Big 4. Industry experience, Internal/Statutory/ SOX 404 Audit

• Excellent communication, and collaboration with proven speaking, presentation, and facilitation experience in internal and external environments

• Good knowledge of Business processes and Internal Controls.
• Problem solving and root cause identification skills.
• Able to leverage network of professionals across functions and business areas.
• Understands the competing organizational needs beyond own part of business.
• Able to interpret complex information and to influence internal and external peers.
• Role model for Novartis’ values and behaviors within the organization with ability to motivate and develop people.
• Ability to effectively prioritize and execute tasks in a high-pressure environment. Can conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities.
• Flexible and reacts to changes promptly and efficiently.
• Proactive, result orientated and with a strong customer centric attitude.
• Interest to learn, explore and develop within the given role.