Senior Manager, Digital Solution Risk & Assurance

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com.

As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function:

Job Sub Function:

Job Category:

All Job Posting Locations:

Job Description:

Innovative Medicine is undertaking a multi-year transformation of its supply chain processes through successive regional releases of SAP S/4HANA and connected digital solutions. Each release introduces new capabilities, processes, applications and data flows. Managing the risks they create requires an integrated view of the solution, the business process it supports and the evidence needed for a controlled deployment.

Reporting to the Director, Risk & Compliance, the Senior Manager, Digital Solution Risk & Assurance leads the assessment and mitigation of risks introduced by new or changed digital capabilities. The role examines how SAP configuration, connected applications, interfaces, data flows and automation support supply chain and Finance processes, with particular focus on financial risk, financial controls and data integrity. It also addresses operational risks arising from those solution changes where relevant.

Working across Business, Finance, Technology, Data and Deployment teams, the Senior Manager translates the release risk profile into a practical de-risking approach. This shapes solution decisions, test coverage, evidence requirements and milestones through design, testing, data migration, cutover, dress rehearsal and deployment. The role provides an evidence-based view of risk and readiness to program leadership; formal go-live decisions remain with the designated governance bodies.

• Assess new capabilities in their end-to-end process context. Identify inherent risks in new or changed S/4HANA configurations, connected applications, interfaces, custom developments and automation; trace how technical failure or design choices could affect process execution, financial outcomes, controls or data integrity.
• Build a release-specific risk profile and assurance approach. Identify material solution and process changes, dependencies and potential failure points; prioritize the depth of review and the mitigation and evidence needed for each release.
• Assess data and integration risks. Map critical data flows and handoffs across legacy and target systems; challenge migration, transformation, interface, reconciliation and downstream reporting arrangements for completeness, accuracy, integrity and clear ownership.
• Embed risk-based assurance throughout the deployment lifecycle. Translate risks into design considerations, test scenarios, negative and cross-system cases, acceptance criteria and evidence requirements. Guide how these are addressed in applicable testing phases, data migration, cutover and dress rehearsals.
• Shape controls for the live environment. Recommend proportionate automated, application and business process controls, monitoring and exception handling; clarify ownership and how control performance will be evidenced after go-live.
• Lead delivery through cross-functional teams. Set the assessment method and priorities for direct reports, where applicable, and guide deployment, solution, data and testing teams without assuming direct line management. Review the quality and completeness of assessments, testing and evidence; escalate material gaps.
• Advise on risk and readiness decisions. Synthesize material issues, mitigation progress, evidence gaps and residual risks for the Director, Risk & Compliance and program leadership. Recommend action and advise the path to go-live, including where plans or milestones need to adapt to address risk.
• Work across the control ecosystem. Partner with Finance controls, cybersecurity, IT compliance and access management teams so application and process risks are assessed in light of relevant IT general controls, security and access foundations without duplicating their ownership.

• Extensive experience in risk, controls or solution assurance for large-scale SAP S/4HANA or similarly sophisticated ERP deployments, including significant involvement across design, testing, cutover and go-live preparation.
• Ability to analyze an end-to-end business process and the technology that enables it, including SAP configuration, application integrations, data flows and automated controls; able to connect technical risks to financial and operational consequences.
• Experience designing or directing risk-based assessments, test scenarios and evidence requirements for new capabilities and supporting decisions on mitigation and residual risk.
• Solid understanding of financial risk, financial controls and data integrity in a complex supply chain environment. Experience in a regulated life-sciences environment is an advantage.
• Demonstrable ability to lead through influence across matrixed Business, Finance, Technology, Data and Deployment teams, challenge build choices constructively and get along with senior stakeholders.
• University degree in information systems, engineering, business, Finance or a related field. Relevant SAP, risk or assurance qualifications may be helpful; hands-on transformation experience is essential.

Johnson & Johnson is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Required Skills:

Preferred Skills: