IT Compliance Specialist – SOX, SAP GRC

Amgen

Specialist IT SOX and SAP GRC Compliance role at Amgen supporting the integrity of financial and IT controls. Leveraging technical analysis and collaboration for SOX and audit compliance.

Posted 5/22/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $109,064 - $147,557 per yearWebsite

Tech Stack

Tools & technologies

ERPETLServiceNowSQL

About the role

Key responsibilities & impact

Support the integrity, accuracy, and compliance of key reports and SAP GRC controls relied upon for SOX processes
Serve as a key contributor to the SOX Key Reports program, supporting reports relied upon for SOX controls
Perform detailed technical analysis of report logic, including code, queries, scripts, and data transformations, to understand how reports are generated
Validate report completeness and accuracy by reconciling report outputs to source systems and underlying data
Assess report logic and calculations to confirm alignment with control objectives and SOX requirements
Partner with system owners and developers to review report design, logic, and dependencies
Perform report tie-outs between the report provided by the process owner and the independently generated output derived from code or query review
Recreate report outputs using reviewed SQL queries, application logic, or ERP report code to validate accuracy
Confirm report logic, parameters, and date ranges used by the process owner align with the underlying code reviewed
Investigate, document, and resolve variances identified during tie-outs, ensuring explanations are reasonable, supported, and appropriately approved
Analyze and interpret technical artifacts such as SQL queries, stored procedures, ETL logic, and application code as needed
Ensure key reports meet SOX documentation and testing requirements, including report completeness, accuracy, and change management controls
Support internal and external audits by providing technical explanations, reconciliations, and evidence related to SOX key reports

Requirements

What you’ll need

Doctorate degree OR Master’s degree and 2 years of Information Security experience OR Bachelor’s degree and 4 years of Information Security experience OR Associate’s degree and 8 years of Information Security experience OR High school diploma / GED and 10 years of Information Security experience
ServiceNow IRM experience.
Prior policy exception, audit, and service management experience.
Attention to detail: Ensure accuracy and thoroughness in policy exception and audit preparation.
Adaptability: Adjust to changing regulatory requirements and security threats.
Service orientation: Focus on stabilizing and enhancing the quality of security services.
Collaboration: Work effectively with cross-functional teams, inform and educate stakeholders, and build strong relationships with stakeholders.
Ability to independently manage priorities and meet deadlines in a fast-paced, virtual team environment.
Superb communication, organization, and planning skills.
Technical curiosity with strong logical, problem-solving, and decision-making skills.
Driven and thorough, with the ability to deal with complexity and ambiguity.
Working experience in an Agile or DevOps environment.
Practical knowledge of information security standards and frameworks such as ISO 27001/27002, NIST, and others.
Preferred Certifications: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), CompTIA Security, Certified Information Systems Security Professional (CISSP), SANS Global Information Assurance Certifications (GIAC)

Benefits

Comp & perks

A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions
Group medical, dental and vision coverage
Life and disability insurance
Flexible spending accounts
A discretionary annual bonus program
Stock-based long-term incentives
Award-winning time-off plans
Flexible work models where possible

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SQLETLreport logicdata transformationsstored proceduresapplication codereport reconciliationSOX compliancetechnical analysisreport generation

Soft Skills

attention to detailadaptabilityservice orientationcollaborationcommunicationorganizationplanningproblem-solvingdecision-makingability to manage priorities

Certifications

Certified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)CompTIA SecurityCertified Information Systems Security Professional (CISSP)SANS Global Information Assurance Certifications (GIAC)