Sanofi, a global healthcare leader, discovers, develops and distributes therapeutic solutions focused on patients’ needs. Sanofi has core strengths in diabetes solutions, human vaccines, innovative drugs, consumer healthcare, emerging markets, animal health and Genzyme.
At Sanofi US, we are committed to the growth of our people, connected in purpose by career, life and health.
Headquartered in Bridgewater, NJ, Sanofi US is part of a leading global healthcare company dedicated to discovering, developing and distributing therapeutic solutions focused on patients’ needs.
Sanofi has core strengths in diabetes solutions, human vaccines, innovative drugs, consumer healthcare, emerging markets, animal health and Genzyme.
Sanofi US employs approximately 17,000 people across the country all dedicated to protecting health, enhancing life and responding to the hopes and potential healthcare needs of seven billion people around the world.
Commitment is our Strength. Ready to grow together?
Sanofi US endeavors to make our career center accessible to any and all users. If you are experiencing difficulty and need assistance applying online, please call 1-800-207-8049 Option 7, then Option 3.
Sanofi US Services, Inc. and its U.S. affiliates are Equal Opportunity and Affirmative Action employers committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race; color; creed; religion; national origin; age; ancestry; nationality; marital, domestic partnership or civil union status; sex, gender, gender identity or expression; affectional or sexual orientation; disability; veteran or military status or liability for military status; domestic violence victim status; atypical cellular or blood trait; genetic information (including the refusal to submit to genetic testing) or any other characteristic protected by law.
IT Manager, Internal Control & Process Improvement – North America
The IT Manager, Internal Control & Process Improvement is responsible for implementing and overseeing processes, programs, and tools to support information assurance, regulatory compliance, internal control governance, and risk management activities. His/her initiatives aim at monitoring technical risk trends and advising IT and business management regarding appropriate IT policies, procedures, and practices with the goal of safeguarding information assets and strengthening IT internal controls. Progress updates as well as practices inconsistent with Sanofi standards are communicated in transparence and regularly to the Region CIO and to corporate Internal Control and Processes.
ESSENTIAL JOB DUTIES AND RESPONSIBILITIES
Maintain strong IT control environments in accordance with the Group Control Framework;
Partner with ITS Compliance team, SAP Security team, IT Infrastructure team, application/system owners, and business users in both Global and North America region to establish and maintain the effectiveness and efficiency of the IT control environment;
Advise IT and business owners related to SAP Security, IT General Controls and IT Application Controls;
Develop and maintain robust SAP security design in roles and user assignments as well as SAP GRC access controls;
Provide the Internal Control team with strategic security guidance over annual SOX and ICM processes as well as special projects;
Ensure that an annual self-assessment on mandatory controls is performed (for each business); define, implement and monitor remediation plans on identified gaps;
Perform IT risk and security assessments and develop information security testing programs;
Recommend and support deployment of new security products and tools, or enhancements to existing tools to prevent any risks of network security measures;
Assess, monitor, report, and remediate on IT risk issues from various stage of the implementation for technology-based tools or enhancement of existing tools;
Monitor conflicts in segregation of duties and mitigate any risks rising from conflicts in a timely manner;
Creates and propagates security awareness and training programs on IT internal controls for business partners;
Provide Information Security support to the business including application access controls, business continuity, disaster recovery, information ownership and privacy;
Review IT internal and external audit findings for potential IT internal control impacts and recommendations. Provide guidance to auditees with implementation of IT action plans. Alert the Region CIO and the Internal Control and Processes Department on all potential internal control issues and risks;
Establish close working relationships with PwC with regard to all SOX ITGC and ITAC issues in North America. Reach agreement on ITGC and ITAC scope and testing strategy. Ensure appropriate resolution and agreement during each phase of annual process, i.e. documentation, walkthroughs and testing. For Shared Processes, agree with external auditors on risk coverage, documentation and testing strategy across the various entities. #LI-SA
REQUIRED EDUCATIONAL BACKGROUND AND JOB-RELATED EXPERIENCE
Bachelor’s degree from an accredited four-year college or university. Area of specialization: Computer Science, MIS or Information Technology related degree
KNOWLEDGE, SKILLS AND EQUIVALENT EXPERIENCE
7+ years of relevant experience in information security and technology risk management in a complex technology environment;
SAP Security and SAP GRC experience required;
Broad understanding of audit, control, and security standards including COBIT, SOX, ITGC, ITAC, etc;
Solid grasp of concepts on a wide array of technology platforms, controls, and IT processes;
Proven ability to manage multiple projects, work effectively with cross-functional partners and drive process improvement initiatives across an organization;
Strong inter-cultural skills and eagerness to work in a very international setting;
Excellent organizational and analytical skills as well as communication skills to build commitment create adherence and report to management; proven ability to operate effectively under pressure and tight timeframes;
Polished communication skills, including proven ability to actively listen to the needs of the business units and comprehend complex matters. Ability to present findings as well as recommendations in both oral and written presentations to Senior Management.
Job : Audit
Primary Location : United States-New Jersey-Bridgewater
Job Posting : Jan 26, 2017, 8:39:38 AM
Job Type : Regular
Employee Status : Regular