Job title: Segregation of Duties Lead
About the job
Sanofi is a global life sciences company committed to improving access to healthcare and supporting the people we serve throughout the continuum of care. From prevention to treatment, Sanofi transforms scientific innovation into healthcare solutions, in human vaccines, rare diseases, multiple sclerosis, oncology, immunology, infectious diseases, diabetes and cardiovascular solutions and consumer healthcare. More than 110,000 people in over 100 countries at Sanofi are dedicated to making a difference on patients’ daily life, wherever they live and enabling them to enjoy a healthier life.
The Segregation of Duties (SoD) Lead will play a pivotal role in strengthening Sanofi's internal control framework by leading the definition and evolution of Sanofi's Segregation of Duties strategy, linked to financial risks. This position serves as the global subject matter expert for SOD controls, driving strategic direction while ensuring compliance with regulatory requirements and corporate governance standards. As the SoD Lead, you will influence the organization through expert guidance and strategic recommendations, working closely with Digital teams to implement SOD rules in enterprise systems, particularly SAP GRC Access Control (NOVA), and providing strategic leadership to the Global Process Owner (GPO) organization on SOD risk definition, assessment, and continuous monitoring.
Main responsibilities
- SOD Policy Governance & Compliance: Lead the definition and continuous evolution of Sanofi's global Segregation of Duties policy framework, ensuring alignment with financial risk management objectives and regulatory requirements (SOX, internal audit standards). Own and drive updates to the global SOD Matrix, proactively identifying emerging risks, business changes, and regulatory developments to ensure comprehensive coverage of critical financial process risks and incompatible function combinations. Champion SOD compliance culture across all Sanofi entities and business units globally, promoting awareness and accountability at all levels. Propose and drive policy enhancements based on regulatory changes, audit findings, and business evolution. Serve as the escalation point and authority on SOD policy interpretation, providing clear and consistent guidance across the organization. Develop and maintain SOD control documentation, including policy guidelines, procedures, and risk assessment methodologies.
- Stakeholder Management & Training: Lead SOD governance forums and steering committees, ensuring alignment across business, finance, and technology stakeholders. Influence GPO organizations through expert guidance, strategic recommendations, and proactive risk advisory. Build and mentor SOD subject matter experts across regions and functions, fostering a network of SOD champions throughout the organization. Drive organizational change initiatives related to SOD controls, ensuring smooth adoption of new policies, processes, and tools. Develop and deliver SOD training programs tailored to various audiences (process owners, system administrators, end users). Build strong relationships with regional and functional teams to promote SOD awareness and a compliance-driven culture.
- Digital Systems Implementation & Support: Lead the business strategy for SOD automation in SAP GRC Access Control or any SOD related tool, ensuring the system roadmap aligns with evolving SOD policy requirements. Partner with Digital teams to translate strategic SOD requirements into technical rule configurations within SAP GRC. Validate and approve SOD rule configurations before deployment, ensuring accuracy and alignment with policy intent. Drive the design, testing, and deployment of automated SOD controls in enterprise systems. Troubleshoot SOD-related system issues and provide expert guidance on rule optimization. Lead SOD control integration efforts during system upgrades, enhancements, and new module implementations.
- GPO Organization Support & Risk Management: Partner with Global Process Owners (GPOs) to define, assess, and document SOD risks within their respective process areas. Facilitate SOD risk workshops and training sessions for GPO teams and process owners. Provide expert consultation on SOD risk mitigation strategies, including compensating controls and process redesign recommendations. Support GPOs in establishing SOD monitoring procedures and key risk indicators. Assist the investigation and resolution of SOD conflicts and violations. Develop risk-based approaches to prioritize SOD remediation efforts.
- Monitoring, Reporting & Continuous Improvement: Establish and maintain SOD monitoring frameworks and dashboards to track compliance and identify trends. Generate regular reports on SOD violations, remediation status, and control effectiveness for management and audit committees. Conduct root cause analysis of recurring SOD issues and recommend sustainable solutions. Drive strategic initiatives to continuously enhance SOD control efficiency, effectiveness, and scalability. Stay current with industry best practices, regulatory changes, and emerging SOD methodologies, proactively integrating relevant developments into Sanofi's SOD strategy.
About you:
- Experience: Minimum 10 years of experience in internal controls, SOX compliance, or financial risk management. At least 3–5 years of hands-on experience leading Segregation of Duties frameworks, implementations and remediation plans. Proven track record of driving organizational change in control environments. Proven experience working with SAP GRC Access Control or similar access governance tools. Experience in a leadership or subject matter expert role within a multinational organization, preferably in pharmaceutical, healthcare, or highly regulated industries. Experience supporting or working with Global Process Owner organizations or similar governance structures.
- Education: Bachelor’s degree in finance, Accounting, Information Systems, Business Administration, or related field. Master's degree in a relevant discipline (MBA, MS in Accounting, MS in Information Systems). Professional certifications such as: Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), SAP GRC Access Control Certification.
- Technical skills: Deep understanding of Segregation of Duties principles, frameworks, and best practices. Strong knowledge of financial processes and associated risks (Order-to-Cash, Procure-to-Pay, Account-to-Report, etc.). Proficiency in SAP GRC Access Control configuration, rule design, and administration. Familiarity with SAP ERP modules (FI, CO, MM, SD) and their authorization objects. Understanding of SOX compliance requirements and internal control frameworks (COSO, COBIT). Experience with access governance, role-based access control (RBAC), and identity management concepts.
- Analytical & Problem-Solving Skills: Strong analytical skills with ability to assess complex business processes and identify SOD risks. Excellent problem-solving capabilities to address SOD conflicts and design effective controls. Data analysis skills to interpret SOD reports, identify patterns, and drive insights. Ability to balance risk management with business operational needs.
- Leadership skills: Demonstrated ability to influence stakeholders without direct authority. Strong communication skills to translate complex SOD concepts for diverse audiences, from operational teams to senior leadership. Experience building and leading cross-functional teams or initiatives. Ability to balance strategic vision with operational execution.
Why choose us?
- Bring the miracles of science to life alongside a supportive, future-focused team.
- Discover endless opportunities to grow your talent and drive your career, whether it’s through a promotion or lateral move, at home or internationally.
- Enjoy a thoughtful, well-crafted rewards package that recognizes your contribution and amplifies your impact.
- Take good care of yourself and your family, with a wide range of health and wellbeing benefits including high-quality healthcare, prevention, and wellness programs and at least 14 weeks’ gender-neutral parental leave.
- Opportunity to work in an international environment, collaborating with diverse business teams and vendors, working in a dynamic team, and fully empowered to propose and implement innovative ideas.
Pursue progress, discover extraordinary
Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.
At Sanofi, we provide equal opportunities to all regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, ability or gender identity.
Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!
