UAM Compliance Lead | RGC

Role Profile

Role title: UAM Compliance Lead – RGC
Band: F
Reports to: Head – Role Governance and Compliance
Function: Finance
Department: Role Governance and Compliance
Location: Pune

Role purpose:
Vodafone has recently completed its largest business transformation project for back-office Finance, Supply Chain and HR operations and we now have over 130,000 users of this solution in over 20 countries. With such a large user base working across multiple business process areas, User and Access Management (UAM) is extremely important to our business. To this end, we have a Global Roles, Governance & Compliance (RGC) Team governing role design and user access management controls. This is a fantastic team, at the heart of our business processes and solutions, working with colleagues in multiple disciplines all around the world
RGC Manager will play a key role managing this entire RGC team with Global standards through driving a high-performance team, UAM Policy enforcement, strategic planning and technology implementation for process, governance and compliance across EVO applications. As a leader of EVO access compliance and governance in Vodafone, he/she is responsible for driving the overall vision, roadmap and strategy for access management in line with Vodafone Cyber Security Baseline (CSB). This role will play a vital role to maintain UAM risk controls and support SOX compliance objectives with quality, performance, business value and customer experience.

Key accountabilities and decision ownership

• Ensure the implementation of UAM Control strategies and framework across EVO landscape.
• Communicating with the key stakeholders and business leaders about the UAM risk and UAM risk management effort.
• Identifying opportunities for new systems /tools to improve UAM compliance and governance.
• To provide expertise to the wider Vodafone business regarding user security.
• Continuously evaluating the organisation’s UAM compliance and governance process to identify areas of improvement.
• Manage RGC roadmap and budget ownership.
• Strategic partnership with external vendors. This includes working with third-party vendors, service providers, and other external partners to ensure that they are meeting the organization's IT risk and compliance requirements.
• Oversee the RGC compliance team for controls and other regulatory commitments.
• Ensure compliance to the Global User Administration processes.
• Monitor the control performance around user provisioning process in the RGC.
• Oversee the RGC Role design team for development, implementation and support to meet the access security by design goal.
• Oversee RGC projects and initiatives and ensure smooth delivery.
• Monitor the control performance around user provisioning process in the RGC.
• Timely support on incident escalations.
• Motivating and mentoring and lead the talent to be their best

Additional Information

Core competencies, knowledge and experience:

Essential:
• Detailed knowledge of SAP authorisations
• Detailed knowledge of SAP GRC / AVM
• Extensive knowledge of Access Governance and Risk compliance controls
• Excellent written and oral communication skills

Experience:
• 13+ years of experience in managing UAM processes, compliance, and governance in large scale environment.
• Have a proven track record to build UAM strategy that are robust and scalable.
• Team management experience.

Must have technical / professional qualifications:
• Detailed knowledge of SAP authorisations
• Detailed knowledge of SAP GRC preferably
• Ability to work in a global environment
• Ability to work under time pressure

Budget owned: Yes

Key performance indicators:

• No deviations from the UAM global processes
• No user access related security incidents are reported
• UAM controls are performed consistently on time accurately
• Audit certification for UAM Controls

Direct reports:
• RGC Project and Roadmap Lead
• UAM Compliance Controller
• Team of Compliance Analyst and Compliance Specialists

Dotted reports:
There are no dotted reports but there are key stakeholders:
• Internal and External Auditors, IT & Business SOX Controllers, EVO Service Managers, User Administration Team, HR Services Professionals, Global Workforce Identity and Access Management team

Skills
Fraud and Ethics
Internal Audit Methodology
Internal Controls
Audit Governance
Audit Process
Audit Delivery
Audit Reporting
Program Assurance
Governance and Policy Compliance
Data Analytics and Insights

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in