Sr. Spec. DDIT SecOps IAM

Major accountabilities:

• E xperience in SOX compliance guidelines and interpretations and fully familiar with PCAOB requirements for IAM team. Identify key controls and develop work programs for testing of these key controls.
• Perform and documents SOX walkthroughs and testing in accordance with the Company s frameworks
• Assist with the maintenance of consistency and quality in SOX compliance work across the IAM.
• Oversees identity governance and access services offered to customers inside and outside of Novartis global IT Infrastructure.
  Oversees processes and resources delivering identity governance and access services, ensuring the coordination of these teams in overall planning activities, service delivery, and issue resolution.
  Knowledge of prior experience working with or within the business on risk/controls, audit/compliance or business/product teams
• Manage and run effective governance forums including the IAM control forum in line with IAM and CSO governance framework ensuring effective oversight of the embedment of standard and oversight of the control environment.
• Monitoring of the control health via Key Risk and Control indicators
• Experience with regulatory frameworks, such as SOX, GxP, or similar.
  Performs service reviews, qualifications and self assessments to e.g. ensure conformance with service-, quality-, audit, compliance, security and SOX requirements and industry best practices (Inhouse Operations, Third Party Suppliers and external Service Providers).
  Assists with the planning, (with Architecture, and Governance) to establish the overall IAM controls and inline the services delivery roadmaps.
  Ability to get involved with engineering and/or development activities to ensure it is within the IAM Standards and framework, if not then gap analysis on the right fitment of the products.

Work Experience:

• University working and thinking level, degree in computer science or comparable education / experience with10 (or more) years of IT experience
• Solid understanding of Identity and Access Management concepts.
• Minimum 10 years of relevant IAM Security governance experience
• Good understanding of IAM (SSO, IGA , PKI ) domains.
• Currently working on the IAM Governance or audits of the IAM internal and external audit experience
• Expertise in User Lifecycle Management, Access Certifications, Access Request, Workflow, and Delegated Administration.
• 5+ years experience with SOX controls and enterprise governance, enterprise compliance, SSO authentication and authorization with Microsoft Azure, Cyberark
• Basic/Overview Operations experience with Oracle Access Manager (OAM), Oracle Unified Directory (OUD) and Oracle Identity Manager (OIM). Developer/coding experience in Oracle Identity manager will be preferred. Onboarding of applications on OAM, OUD and OIM IAM tools.
• Other knowledge like Active Directory, Azure MFA or Cyberark is added advantage.