The IT Compliance Program Manager will oversee the IT controls, processes, and transactions to ensure they follow all relevant regulatory, legal, and internal compliance guidelines. This role will manage and oversee SAP security, ensure regulatory compliance, oversee and auditing enterprise IT controls across Network, Identity & Access, and Application/Data and Cloud. This role will also develop and maintain company policies, standards, and respond to policy violations and address any gaps
What You’ll Work On
- Implement and manage an effective IT compliance program for the enterprise which includes both regulatory compliance (SOX, SOC2, Fed-Ramp) and internal enterprise IT controls.
- Manage SAP GRC access control, RAR (Risk Analysis and Remediation) and SOD (segregation of duty), mitigation and remediation, BW authorization and access, SAP role design, administration and analysis, user administration on approved procedures.
- Partner with SAP team where necessary, be self-reliant on SAP security reviews, evidence retrieval, engage with 3rd party auditors on testing/walk-throughs and address any security gaps.
- Partner with system owners on IT services audit, evidence gathering, risk management and compliance reporting.
- Create and manage effective action plans in response to audit discoveries and compliance violations.
- Advise management on the company’s compliance with laws and regulations through detailed reports.
- Develop, and up-keep company IT security policies and procedures. Regularly audit company procedures, practices, and documents to identify possible weaknesses or risks.
- Ensure stakeholders are educated on the latest regulations and processes. Resolve business concerns about regulatory and legal compliance.
- Maintain positive rapport with IT teams, business, and auditors through effective communications.
- Adhere to the Company’s Quality Management System (QMS) as well as domestic and global quality system regulations, standards, and procedures.
- Understand relevant security, privacy and compliance principles and adhere to the regulations, standards, and procedures that are applicable to the Company.
- Ensure other members of the department follow the QMS, regulations, standards, and procedures.
- Perform other work-related duties as assigned.
What You’ll Bring
- Bachelor’s degree in computer science or related field with 5+ years of experience, or equivalent combination of education and experience
- SAP certification in security or GRC a plus
- 5+ years’ experience preferred in a Compliance Manager role managing the below hands on activities:
- SAP security and GRC tools, such as SAP GRC (Access Control, Process
- Control, Risk Management) SAP Security Optimization Service, and SAP Audit Management experience
- SOD conflict resolution, SAP Security Basics, SAP Authorization Concept, Security Roles definition and design, and User Administration
- SAP ECC/HANA S4 security implementation/ operations, SAP Fiori for SAP S/4HANA security implementation/ operations
- Audit enterprise IT compliance across Network, Identity & Access, Application/Data and Cloud
- Ability to manage regulatory compliance i.e., SOX, SOC2, GDPR, and Enterprise IT controls is required
- Knowledge of overview process of SAP functional modules, such as Financial Accounting and Controlling (FICO), Material Management (MM), and Sales and Distribution (SD)
- Strong knowledge of technology landscape, regulatory/legal requirements, and procedures
- Highly analytical with strong attention to detail.
- Strong oral, written, and interpersonal communication skills
- Proficiency with MS Word, Excel, and PowerPoint
- Excellent organizational skills with ability to prioritize assignments while handling various projects simultaneously
Working Conditions
- General office environment. Willingness and ability to work on site. May have business travel from 0% – 5%. Requires some lifting and moving of up to 15 pounds. Must be able to move between buildings and floors. Must be able to remain stationary and use a computer or other standard office equipment, such as a printer or copy machine, for an extensive period of time each day. Must be able to read, prepare emails, and produce documents and spreadsheets. Must be able to move within the office and access file cabinets or supplies, as needed. Must be able to communicate and exchange accurate information with employees at all levels on a daily basis.
- Starting Base Salary Is: $98,105 to $121,950
- Individual compensation will vary based on factors such as qualifications, skill level, competencies, work location and shift, and will increase over time based on meeting performance and business needs.
What We Offer
• A collaborative teamwork environment where learning is constant, and performance is rewarded.
• The opportunity to be part of the team that is revolutionizing the treatment of some of the world’s most devastating diseases.
• A generous benefits package for eligible employees that includes medical, dental, vision, life, AD&D, short and long-term disability insurance, 401(k) with employer match, an employee stock purchase plan, paid parental leave, eleven paid company holidays per year, a minimum of fifteen days of accrued vacation per year, which increases with tenure, and paid sick time in compliance with applicable law(s).
Penumbra, Inc., headquartered in Alameda, California, is a global healthcare company focused on innovative therapies. Penumbra designs, develops, manufactures, and markets novel products and has a broad portfolio that addresses challenging medical conditions in markets with significant unmet need. Penumbra sells its products to hospitals and healthcare providers primarily through its direct sales organization in the United States, most of Europe, Canada, and Australia, and through distributors in select international markets. The Penumbra logo is a trademark of Penumbra, Inc.
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, age, disability, military or veteran status, or any other characteristic protected by federal, state, or local laws.
If you reside in the State of California, please also refer to Penumbra’s Privacy Notice for California Residents.
For additional information on Penumbra’s commitment to being an equal opportunity employer, please see Penumbra’s AAP-Policy-Statement.