SAP GRC SOX Compliance Analyst
About the position At Amgen, if you feel like you're part of something bigger, it's because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do. Since 1980, we've helped pioneer the world of biotech in our fight against the world's toughest diseases. With our focus on four therapeutic areas -Oncology, Inflammation, General Medicine, and Rare Disease- we reach millions of patients each year. As a member of the Amgen team, you'll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives. Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you'll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career. Responsibilities • Enable Information Technology Sarbanes-Oxley (SOX) Compliance. • Collaborate with the IT SOX Compliance Manager, service owners, engineers, and other internal partners. • Develop, maintain, and improve Amgen's Information Compliance. • Support the SAP GRC Controls Management and Compliance function. • Demonstrate a good working knowledge of the SAP GRC environment. • Coordinate, collaborate, and communicate with IT personnel to ensure IS SOX process compliance. • Work with process owners, internal, and external auditors in support of quarterly certification process. • Collaborate and support SOX evidence request efforts made by Internal and External Audit teams. • Develop and promote educational mentorship resources for new owners regarding the Sarbanes-Oxley Act. • Participate in walkthroughs with system, service, and process owners. • Review and analyze SOX systems and applications for SOX applicability. • Assess risks of IT audit findings and identify mitigating controls. • Map regulatory requirements across functions to identify compliance efficiencies. • Contribute to the strategic development of Information Governance (IG) program. • Ensure quality of work and timeliness across different functional deliverables. Requirements • Master's degree OR Bachelor's degree and 2 years of Information Systems experience OR Associate's degree and 6 years of Information Systems experience OR High school diploma / GED and 8 years of Information Systems experience. • 4+ years of IT audit, Information Technology / Security control assurance or enterprise IT compliance experience. • Working knowledge of Information Governance principles and Information Security principles. • Knowledge of international standards for Information Technology and Information Governance. • Experience working with various technologies, IT frameworks and methodologies. • Strong written and verbal communication skills. • Possess strong organizational and collaboration skills. • 3+ years of experience within health, biotechnology/pharma or other regulated industries. • Working experience with Governance, Risk and Compliance (GRC) tools. Nice-to-haves • Proven ability to understand new cloud technologies and emerging Big Data technologies. • Exceptional teamwork encompassing cross-functional teams. • Ability to convey and influence complex information compliance, risk and security issues. • Ability to effectively facilitate and inspire change within the organization. • One or more industry recognized certifications (CISA, CISM, CISSP, GIAC). Benefits • Comprehensive employee benefits package including Retirement and Savings Plan. • Group medical, dental and vision coverage. • Life and disability insurance. • Flexible spending accounts. • Discretionary annual bonus program. • Stock-based long-term incentives. • Award-winning time-off plans. • Flexible work models, including remote and hybrid work arrangements. Apply tot his job