The posting
Life changing therapies. Global impact. Bridge to thousands of biopharma companies and their patients.
We are PCI.
Our investment is in People who make an impact, drive progress and create a better tomorrow. Our strategy includes building teams across our global network to pioneer and shape the future of PCI.
Main responsibilities:
User Access Administration
- Create, amend, disable, and remove JDE user accounts in accordance with approved processes.
- Manage user access throughout the employee lifecycle, including joiners, movers, and leavers.
- Assign and maintain JDE roles, responsibilities, menus, environments, and security permissions.
- Process and validate requests for additional or amended access.
- Ensure access requests have the appropriate business approval before changes are made.
- Maintain accurate records of user access and security changes.
- Investigate and resolve user access and authentication issues.
JDE Security Administration
- Administer JDE EnterpriseOne security, including users, roles, applications, menus, UDO’s and security configuration.
- Maintain role-based access controls in line with business requirements.
- Support the implementation of least-privilege access principles.
- Monitor and review security settings and access assignments.
- Assist with the design and maintenance of JDE security roles as business processes and organisational structures change.
- Support security changes associated with new JDE functionality, enhancements, projects, and system upgrades.
- Identify inappropriate, excessive, or conflicting access and escalate where appropriate.
Governance, Risk & Compliance
- Support regular user access reviews and certification activities.
- Assist with segregation-of-duties (SoD) reviews and remediation.
- Produce access and security reports for management, internal controls, and audit purposes.
- Maintain evidence of access approvals and security changes.
- Support internal and external audits relating to JDE security and user access.
- Ensure security administration activities comply with company policies, procedures, and applicable regulatory requirements.
- Contribute to continuous improvement of JDE security controls and processes.
Support & Stakeholder Management
- Act as a key point of contact for JDE user security queries.
- Work closely with the Service Desk and IT teams to resolve access-related incidents and requests.
- Liaise with business process owners to understand access requirements and ensure appropriate role assignment.
- Communicate security requirements and access procedures clearly to users and stakeholders.
- Provide guidance to managers and system owners on appropriate JDE access.
Documentation & Continuous Improvement
- Maintain JDE security procedures, work instructions, and supporting documentation.
- Keep role and access documentation up to date.
- Identify opportunities to improve the efficiency, control, and automation of security administration processes.
- Support the development and implementation of standardised security administration processes.
- Contribute to JDE projects, upgrades, integrations, and other initiatives where security and access management are impacted.
Other General CNC Tasks
- Supporting CNC operations, such as package builds and deployments, object promotions, path codes, OCM mappings, data sources, environments, kernels and server services.
- Troubleshooting EnterpriseOne application, web, batch-processing, authentication, performance and connectivity issues.
- Supporting upgrades, patches, ESUs, tools releases, disaster-recovery testing and environment refreshes.
Work Experience and Skills Required
Essential
- 7+ years supporting JD Edwards EnterpriseOne, including substantial hands-on security and CNC administration experience.
- Administration of EnterpriseOne 9.2 across development, test and production environments
- Strong knowledge of JD Edwards EnterpriseOne security architecture and security workbench functionality, including UDO security.
- Strong knowledge of EnterpriseOne CNC architecture, including Enterprise Server, HTML Server, Deployment Server and Server Manager.
- Understanding of EnterpriseOne tables, UBE processing, package deployment, object management, OMW, data sources and OCM.
- Ability to investigate logs, identify root causes and resolve complex technical or access-related issues.
- Good understanding of identity and access management, authentication, password controls, privileged access and service accounts.
- Working knowledge of supported operating systems, databases, web/application servers and networking concepts.
- Understanding of internal controls, GDPR, audit requirements, segregation of duties and security risk management.
- Strong analytical skills and the ability to balance operational requirements with security and compliance controls.
- Clear written and verbal communication, particularly when translating technical or security issues for business stakeholders.
- Ability to prioritise competing incidents, requests, projects and planned maintenance in a global support environment.
- Strong attention to detail, documentation discipline and commitment to controlled change.
- Ability to work independently, lead technical investigations and provide guidance to less-experienced colleagues.
Preferred Experience
- Hands-on experience with ALLOut Security software for JD Edwards, including user provisioning, role design and maintenance, security reporting, segregation-of-duties analysis, access reviews, risk remediation and audit evidence.
- Hands-on experience supporting IBM i (iSeries/AS400) environments and Db2 for i databases, including administration, monitoring, performance troubleshooting and integration with JD Edwards EnterpriseOne.
- Experience working in a regulated GxP pharmaceutical and SOX-compliant environment, with a strong understanding of validated systems, data integrity, controlled change, documented procedures, segregation of duties, access governance, audit evidence and the operation of IT general controls.
Qualifications:
Essential
- Bachelor’s degree or equivalent professional experience in Information Systems, Computer Science, Cybersecurity, Business Systems or a related discipline.
- Demonstrable professional training or certification in JD Edwards EnterpriseOne administration, CNC or security, or equivalent hands-on expertise gained through significant experience.
Desirable
- Oracle JD Edwards EnterpriseOne certification or formal training, particularly in CNC, system administration, security or current Tools releases.
- Recognised information-security or governance certification, such as CISSP, CISM, CISA, CRISC or CompTIA Security+.
- Identity and access management certification or training covering access governance, privileged-access management or role engineering.
- ITIL Foundation or a comparable IT service-management qualification.
- Training or certification in ALLOut Security for JD Edwards, including security reporting, user provisioning, role management and segregation-of-duties analysis.
- Formal training in GxP, GMP, computerised-system validation, data integrity or 21 CFR Part 11 controls.
- Knowledge of SOX compliance and ITGC testing, supported by relevant audit, risk or compliance training
Working Environment:
- Ability to adjust working hours to meet the needs of the business.
- The role is primarily a work from home position.
- As this is a global position the jobholder may be required to travel to other sites and locations globally across the PCI group periodically.
Regulatory/Industry Responsibilities:
General
- The job holder is responsible for adhering to PCI Standard Operating Procedures (SOPs), Health, Safety and Environmental rules, General Data Protection Regulations (GDPR), Good Manufacturing Practices (GMP) and other regulatory guidelines.
Join us and be part of building the bridge between life changing therapies and patients. Let’s talk future
Equal Employment Opportunity (EEO) Statement: PCI Pharma Services is an Equal Opportunity/Affirmative Action Employer. We do not unlawfully discriminate on the basis of race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, or any other protected status.
At PCI, Equity and Inclusion are at the core of our company’s purpose: Together, delivering life-changing therapies. We are committed to cultivating an inclusive workplace by holding ourselves accountable to the highest standards of understanding, fairness, respect, and equal opportunity – at every level. We envision a PCI community where everyone can belong and grow, and we strive to bring this vision to reality by continuously and intentionally assessing our people practices, policies and programs, marketing approach, and workplace culture.
