SOX ITGC Controls & SOX Key Reports

Job Title: SOX ITGC Controls & SOX Key Reports Company: Amgen SAP Module: SAP ABAP Roles & Responsibilities: JOB ID: R-256190 LOCATION: India - Hyderabad WORK LOCATION TYPE: On Site DATE POSTED: Oct. 15, 2026 CATEGORY: Engineering Job Description =================== The Specialist role is a key member of the Governance, Risk and Compliance (GRC) team within Cybersecurity and Digital Trust (CDT). The position is responsible for supporting Amgen's Information Technology Sarbanes-Oxley (SOX) Compliance program, with primary responsibilities across SOX IT General Controls (ITGCs) and SOX Key Reports. The Specialist will partner with IT SOX Compliance leadership, system and service owners, engineers, developers, Finance, Compliance, Corporate Audit, and Internal and External Audit teams to support the design, execution, monitoring, validation, and continuous improvement of SOX IT controls and key reports. The role requires a strong understanding of IT controls combined with the technical ability to analyze systems, applications, report logic, data flows, queries, and supporting technologies to ensure SOX controls and reports are appropriately designed, documented, operated, and supported. Key Responsibilities ======================== * Support the execution and ongoing management of the ITGC SOX Controls and Compliance program. * Coordinate and support quarterly and annual SOX certification activities with control owners, process owners, system owners, and other stakeholders. * Support Internal and External Audit evidence requests, testing inquiries, walkthroughs, and remediation activities. * Review SOX systems and applications within the Configuration Management Database (CMDB) to assess SOX applicability and ensure relevant system components and dependencies are appropriately identified. * Assess IT audit findings, identify relevant mitigating controls, support root cause analysis, and coordinate remediation activities through completion. * Support the design, implementation, and effectiveness of SAP GRC SOX ITGC controls, including Logical Access, Segregation of Duties (SoD), and Emergency Access. * Support SAP GRC processes such as Access Request, Risk Analysis, Role Management, user access lifecycle activities, and Emergency Access. * Support key access controls including role reviews, privileged access monitoring, access governance, and related issue remediation. * Partner with IT Security, SAP Basis, application teams, and other technology stakeholders to ensure appropriate implementation and operation of controls across SAP ECC, S/4HANA, and integrated systems. * Develop and maintain SOX guidance, procedures, training materials, and educational resources to support control and process owners. * Review custom-developed and configurable report logic, including technologies such as SAP ABAP, SQL, ERP reporting tools, and other financial applications. * Investigate and document variances identified during report validation and ensure explanations and resolutions are appropriately supported. * Ensure SOX Key Reports meet applicable documentation and testing expectations, including completeness, accuracy, access, and change management considerations. Audit, Risk & Compliance Support ------------------------------------ * Prepare and provide clear, complete, and timely audit evidence, technical explanations, reconciliations, and supporting documentation. * Ensure quality, completeness, and timeliness across assigned SOX and compliance deliverables. * Maintain awareness of changing technology environments, implementation methodologies, regulatory expectations, and emerging technologies that may impact IT controls and compliance. * Identify opportunities to improve and automate SOX compliance, control monitoring, evidence collection, report validation, and related processes. * Understanding of data flows, system interfaces, ETL processes, access controls, and change management. * Strong organizational, planning, and prioritization skills with the ability to manage multiple deliverables and deadlines. * Strong collaboration and stakeholder-management skills. * Certified Information Security Manager (CISM) Work Location: TS, India Availability: Full time

Technical Skills & Experience ================================= * Experience working with ERP platforms such as SAP S/4HANA, SAP ECC, Oracle, Workday, and/or PeopleSoft. * Ability to review and understand queries, scripts, application logic, and report code; experience with SQL, SAP ABAP, Python, or similar technologies is preferred. * Experience with Governance, Risk and Compliance tools such as AuditBoard, SAP GRC, ServiceNow IRM, or similar platforms. * Experience with financial systems or applications such as Anaplan and Model N is an advantage. * Financial controls, financial reporting, or Big Four IT Audit/SOX advisory experience is an advantage. Basic Qualifications ======================== Master's degree Bachelor's degree and 2 years of Information Systems experience Associate's degree and 6 years of Information Systems experience High school diploma/GED and 8 years of Information Systems experience. Preferred Qualifications ============================ * 0-2 years of experience in IT Audit, SOX compliance, Information Technology/Security control assurance, enterprise IT compliance, or a related field. * Experience working in large, global corporate environments involving multiple business and technology functions. * Experience within biotechnology, pharmaceutical, healthcare, or another regulated industry is preferred. * Experience with SAP environments, including SAP S/4HANA, ECC, and SAP GRC. * Experience reviewing report logic, source data, queries, scripts, and system-generated reports. * Experience working within Agile and/or DevOps environments. Industry-recognized certifications are preferred, including: * SANS Global Information Assurance Certification (GIAC) Key Skills: SAP ABAP, SQL Salary: Not disclosed