Senior Specialist ERP Security, Risk

At Johnson & Johnson, we believe health is everything. Our strength in healthcare innovation empowers us to build a world where complex diseases are prevented, treated, and cured, where treatments are smarter and less invasive, and solutions are personal. Through our expertise in Innovative Medicine and MedTech, we are uniquely positioned to innovate across the full spectrum of healthcare solutions today to deliver the breakthroughs of tomorrow, and profoundly impact health for humanity. Learn more at jnj.com. As guided by Our Credo, Johnson & Johnson is responsible to our employees who work with us throughout the world. We provide an inclusive work environment where each person is considered as an individual. At Johnson & Johnson, we respect the diversity and dignity of our employees and recognize their merit.

Job Function

Technology Enterprise Strategy & Security

Job Sub Function

Security & Controls

Job Category

Scientific/Technology

Job Posting Locations

Beerse, Antwerp, Belgium

Job Description

Johnson & Johnson is seeking a Senior Specialist ERP Security, Risk & Compliance Services, within the Supply Chain Technology Services team. The position is based in EMEA-Belgium. Technology Services manages all IT infrastructure (architecture, engineering, deployment and support) for the Johnson & Johnson Family of companies worldwide. The Senior Specialist ERP Security, Risk & Compliance Services serves as a strategic leader and subject matter expert responsible for ERP security governance, SAP and JDE compliance programs, internal controls, audit readiness, and risk management. This role partners with business and technology stakeholders to ensure secure, compliant, and sustainable ERP operations while supporting regulatory requirements including SOX, GxP, Data Privacy, and cybersecurity standards.

Key Responsibilities

• SAP & JDE Security Governance Define and maintain the strategic roadmap for ERP security, controls, and compliance across SAP and JDE environments. Serve as the functional and technical expert for SAP Security, SAP GRC, Access Controls, Emergency Access Management, Role Governance, and Segregation of Duties (SoD). Drive continuous improvement of enterprise security controls, governance frameworks, and compliance monitoring capabilities. Ensure alignment between global ERP security standards and regional business requirements.
• Risk Management & Internal Controls Lead ERP risk assessments and control reviews across SAP and JDE platforms. Partner with Internal Audit, Compliance, Quality, and Cyber Security teams to identify, assess, and mitigate control deficiencies. Oversee SoD risk analysis, remediation planning, mitigating controls, and ongoing monitoring. Support control design, testing, remediation, and documentation activities for major ERP transformation initiatives including SAP S/4HANA SOX Compliance & Audit Management Own and coordinate SAP and JDE SOX compliance activities across multiple ERP landscapes. Lead preparation, delivery, and governance of SOX reports, audit evidence, control documentation, and management responses. Manage internal and external audit engagements including SOX, financial, operational, cybersecurity, and regulatory audits. Coordinate audit requests, evidence collection, stakeholder engagement, remediation tracking, and audit status reporting. Ensure audit readiness through proactive monitoring of compliance obligations and control effectiveness.
• Identity & Access Management Oversee ERP user access governance processes including provisioning, role design, privileged access, periodic reviews, and certification activities. Drive standardization and optimization of SAP and JDE security role architectures. Ensure compliance with least-privilege principles and enterprise access management standards. Collaborate with cybersecurity and identity management teams to strengthen overall security posture.
• Strategic Leadership & Stakeholder Management Serve as the primary ERP Security and Compliance advisor for business leaders, technology teams, and project organizations. Lead both internal and external resources supporting ERP security and compliance services. Establish strong relationships with auditors, compliance organizations, security teams, business stakeholders, and external partners. Support enterprise transformation initiatives by embedding security, compliance, and risk management requirements into solution designs. Promote a culture of compliance, accountability, continuous improvement, and operational excellence.

Qualifications

Education

Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting Information Systems, or a related discipline required.

Master's degree or relevant professional certifications preferred.

Experience

Minimum 5+ years suppo