Segregation of Duties and User Access Manager

SOD & Access Manager About Us We’re Reckitt, home to the world’s best loved and trusted hygiene and health brands. Our purpose defines why we exist: to protect, heal and nurture in the relentless pursuit of a cleaner, healthier world. We are a global team united by this purpose. Join us in our fight to make access to the highest quality hygiene, wellness, and nourishment a right and not a privilege. About Global Business Services Behind our iconic power brands that touch millions of lives daily – from Dettol and Lysol to Durex and Nurofen – lies a dynamic and vital engine: Reckitt's Global Business Services (GBS). Fuelled by a culture of positive energy and co-creativity - while learning together - OneReckitt GBS is at the forefront of our business, driving efficiency, standardisation, and innovation across our global operations. We're a fast-paced, purposeful team, constantly seeking to optimise our processes, leverage cutting-edge technology, and deliver exceptional value to every corner of Reckitt. We’re not a traditional back-office function; we’re a strategic powerhouse where diverse individuals with bright minds come together to solve complex challenges, shape future capabilities, and build a better global business that directly helps achieve Reckitt’s mission About the role As the Manager – GFS SOD & User Management, you will report to the Internal Controls Senior Manager and own the global strategy and execution for Segregation of Duties (SOD) and user access governance across finance applications and platforms. You will define the control framework, orchestrate endtoend joiner–mover–leaver processes, and ensure a robust, auditready control environment that protects our financial integrity. This role partners closely with GPOs, IT, Internal Audit, Security, and regional GFS hubs to design scalable role architectures, deploy preventive and detective controls, and drive continuous reduction of access risk. You will be accountable for policy, tooling, and performance metrics that enable a “right access, right time, least privilege” culture across GFS. Your responsibilities Design, maintain, and continuously improve the global SOD policy, rule set, and control framework across finance systems and connected applications Lead the endtoend user access lifecycle (joiner, mover, leaver), ensuring standardized workflows, SLAs, and strong evidence trails Establish and operate preventive and detective SOD controls, including access risk simulations, preapproval checks, and postprovisioning monitoring Govern role design and access models (RBAC/ABAC), enforcing leastprivilege principles and reducing custom roles and toxic combinations Coordinate and execute periodic user access certifications with business owners; track completion, issues, and remediations to closure Oversee emergency access (firefighter) processes, including approvals, monitoring, and review of activity logs Implement and optimize GRC/IGA tooling and integrations; define functional requirements, test changes, and drive adoption with business and IT Partner with GPOs, Security, and Internal Audit to align SOD coverage with business processes, ITGC, SOX 404, and regulatory obligations The experience we're looking for 8–10+ years in risk, controls, or identity/access governance, with deep experience in SOD frameworks and finance system user management Proven track record establishing or scaling SOD and UAM programs in a shared services or global process organization Handson expertise with role architecture, toxiccombination design, access risk simulation, certifications, and emergency access governance Strong knowledge of SOX 404, ITGC, and control design/operating testing practices; audit or assurance background preferred Experience implementing or optimizing GRC/IGA platforms and workflow integrations with ticketing and HR systems Demonstrated ability to partner with process owners, IT, Security, and Audit to balance control strength with operational practicality Excellent data literacy; able to build metrics, analyse trends, and communicate insights to senior stakeholders Strong program and project management skills; comfortable leading crossregional initiatives and change management Relevant certifications a plus (e.g., CISA, CRISC, CIA, or IAM/IGA credentials) The skills for success Learning & Development Segregation of Duties (SOD) User Access Management (UAM) Identity Governance & Administration (IGA) Role Design & RBAC/ABAC SOX 404 & ITGC Compliance GRC & Access Risk Tooling Access Certification & Recertification Emergency Access Management Controls Design & Testing Audit Readiness & Assurance Risk Assessment & Issue Remediation Policy & Standards Governance Process Optimization & Automation Data Analysis & KPI Dashboards Stakeholder & CrossFunctional Collaboration Program & Project Leadership What we offer With inclusion at the heart of everything we do, working alongside our four global Employee Resource Groups, we support our people at every step of their career journey, helping them to succeed in their own individual way. We invest in the wellbeing of our people through parental benefits, an Employee Assistance Program to promote mental health, and life insurance for all employees globally. We have a range of other benefits in line with the local market. Through our global share plans we offer the opportunity to save and share in Reckitt’s potential future successes. For eligible roles, we also offer short-term incentives to recognise, appreciate and reward your work for delivering outstanding results. You will be rewarded in line with Reckitt’s pay for performance philosophy. Equality We recognise that in real life, great people don’t always ‘tick all the boxes’. That’s why we hire for potential as well as experience. Even if you don’t meet every point on the job description, if this role and our company feels like a good fit for you, we still want to hear from you. All qualified applicants will receive consideration for employment without regard to age, disability or medical condition; colour, ethnicity, race, citizenship, and national origin; religion, faith; pregnancy, family status and caring responsibilities; sexual orientation; sex, gender identity, gender expression, and transgender identity; protected veteran status; size or any other basis protected by appropriate law. Experience Level Mid Level