User Access Management - Implementation Audit Analyst

For more than 130 years, diversity, equity & inclusion (DEI) has been a part of our cultural fabric at Johnson & Johnson and woven into how we do business every day. Rooted in Our Credo, the values of DEI fuel our pursuit to create a healthier, more equitable world. Our diverse workforce and culture of belonging accelerate innovation to solve the world’s most pressing healthcare challenges. We know that the success of our business – and our ability to deliver meaningful solutions – depends on how well we understand and meet the diverse needs of the communities we serve. Which is why we foster a culture of inclusion and belonging where all perspectives, abilities and experiences are valued, and our people can reach their potential. At Johnson & Johnson, we all belong.

J&J Innovative Medicine (IM) Transcend is a global, multi-year end-to-end business transformation program aimed at modernizing foundational business processes through the implementation of SAP S/4 HANA. This program focuses on core functionalities related to SAP Manufacturing, Order to Cash, Procure to Pay, and Finance processes. The IMUAM team plays a crucial role in ensuring security requirements are designed and implemented compliantly within this program.

The Implementation Audit Analyst will partner with the UAM Governance Lead to establish, execute, and sustain an implementation audit and governance framework for SAP S/4 deployments. This role will focus on ensuring audit-ready documentation, traceable control evidence, clearly defined procedures, and consistent governance practices across project and operational readiness activities. The analyst will help validate that UAM processes, controls, risks, and deliverables are sufficiently documented, reviewed, and aligned with SoX, GxP, IT compliance, privacy, and internal policy requirements to support Day 1 Go Live readiness and post-go-live operational sustainability.

Support implementation audit readiness by partnering with deployment, operational, compliance, and UAM teams to ensure governance processes, controls, and evidence requirements are defined, understood, and ready for each SAP S/4 go-live phase.

Embed audit and compliance requirements into the UAM project methodology, including control checkpoints, documentation standards, evidence retention expectations, and health checks across implementation milestones.

Perform implementation governance health checks to assess adherence to UAM strategy, project controls, deliverable quality, remediation tracking, and readiness criteria.

Maintain, validate, and organize audit-ready documentation, including process narratives, control evidence, decision logs, risk assessments, approvals, issue remediation, and go-live readiness artifacts.

Provide implementation audit support for SoX, GxP, IT compliance, privacy, and internal control requirements, including preparation of evidence packages and responses to audit inquiries.

Support implementation risk assessments focused on user access, segregation of duties, sensitive access, data migration, role design, provisioning, and operational handover risks.

Monitor compliance with UAM controls during implementation, with particular focus on SoD, sensitive access, emergency access, role lifecycle controls, approvals, and evidence completeness.

Support remediation tracking for governance, audit, and control gaps, ensuring issues are documented, assigned, resolved, and validated before go-live where required.

Contribute to the UAM taxonomy, control model, and service model as they relate to implementation governance, audit readiness, operational transition, and long-term sustainment.

Deliver audit-focused UAM governance updates, readiness summaries, and framework materials to key stakeholders tailored to SAP S/4 implementation needs.