Specialist IT SOX and SAP GRC Compliance
Job Title: Specialist IT SOX and SAP GRC Compliance
Job Location: Washington D.C., District of Columbia, United States
Job Location Type: Remote
Job Contract Type: Full time
Job Seniority Level:
Join Amgen’s Mission of Serving Patients
At Amgen, if you feel like you’re part of something bigger, it’s because you are. Our shared mission—to serve patients living with serious illnesses—drives all that we do.
Since 1980, we’ve helped pioneer the world of biotech in our fight against the world’s toughest diseases. With our focus on four therapeutic areas –Oncology, Inflammation, General Medicine, and Rare Disease– we reach millions of patients each year. Amgen is advancing a broad and deep pipeline of medicines to treat cancer, heart disease, inflammatory conditions, rare diseases, and obesity and obesity-related conditions. As a member of the Amgen team, you’ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.
Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you’ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.
Specialist IT SOX and SAP GRC Compliance
What you will do
Let’s do this. Let’s change the world. In this vital role, you will support the integrity, accuracy, and compliance of key reports and SAP GRC controls relied upon for SOX processes, helping ensure strong financial and IT control environments across the organization.
Key Responsibilities:
- Serve as a key contributor to the SOX Key Reports program, supporting reports relied upon for SOX controls.
- Perform detailed technical analysis of report logic, including code, queries, scripts, and data transformations, to understand how reports are generated.
- Validate report completeness and accuracy by reconciling report outputs to source systems and underlying data.
- Assess report logic and calculations to confirm alignment with control objectives and SOX requirements.
Technical Review & Reconciliation
- Partner with system owners and developers to review report design, logic, and dependencies.
- Review and understand the custom-developed and configurable code (e.g., SAP ABAP, SQL scripts, Oracle, Workday, custom financial systems) and annotate code logic.
- Perform report tie-outs between the report provided by the process owner and the independently generated output derived from code or query review.
- Recreate report outputs using reviewed SQL queries, application logic, or ERP report code to validate accuracy.
- Reconcile record counts, key data fields, and financial totals between the process owner’s report and the code-generated output.
- Confirm report logic, parameters, and date ranges used by the process owner align with the underlying code reviewed.
- Verify that no manual manipulation or post-extraction adjustments were applied to the report after system generation.
- Investigate, document, and resolve variances identified during tie-outs, ensuring explanations are reasonable, supported, and appropriately approved.
- Analyze and interpret technical artifacts such as SQL queries, stored procedures, ETL logic, and application code as needed.
- Identify gaps, defects, or risks related to report logic, data integrity, or system changes.
- Support remediation activities when report logic or outputs do not meet SOX expectations.
SOX Controls & Audit Support
- Ensure key reports meet SOX documentation and testing requirements, including report completeness, accuracy, and change management controls.
- Support internal and external audits by providing technical explanations, reconciliations, and evidence related to SOX key reports.
- Partner with SOX, compliance, and audit teams to respond to audit inquiries and testing requests.
- Participate in walkthr