Global Head SAP SIAM

sandoz; Elsene; On-site; EUR 180,000 - 240,000; Full time

Job summary

Sandoz is seeking a Global Head SAP SIAM to lead the SAP security, identity and authorisation strategy and governance across BAU, transformation, and M&A activities. The role ensures secure access to SAP systems, data and privileged capabilities and aligns controls with enterprise cybersecurity requirements.

The candidate will own the enterprise SAP security framework, drive risk reduction, and embed global security standards while sustaining decisive leadership for SAP application security

Responsibilities

• Define and continuously evolve the global SAP security, identity and authorisation strategy and multi-year roadmap.
• Own global SAP role-design principles, authorization standards and governance for business, technical and privileged access.
• Embed security-by-design into S/4HANA, SAP BTP, cloud and integration initiatives from design through deployment.
• Maintain audit-ready controls and evidence for access governance, privileged access, role design and reviews.

Job description

Job Description Summary

This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance.

The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.

Job Description

Global Head SAP SIAM

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!

Job Summary

This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance.

The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.

Your Key Responsibilities

Your responsibilities include, but are not limited to:

Major accountabilities:

Security Strategy, Roadmap and Business Value

Define and continuously evolve the global SAP security, identity and authorisation strategy, target architecture and multi-year roadmap. Align security priorities with enterprise cybersecurity direction, SAP CoE objectives, regulatory expectations and business transformation needs. Provide executive-level visibility of security posture, material risks, remediation progress, control effectiveness and investment priorities.

Identity, Role Design and Access Governance

Own global SAP role-design principles, authorization standards and governance for business, technical and privileged access. Establish consistent joiner, mover and leaver controls, request and approval workflows, access recertification and timely deprovisioning expectations. Govern segregation-of-duties rules, mitigating controls, emergency access and privileged access management across SAP environments.

Security Architecture and Transformation Enablement

Embed security‑by‑design into S/4HANA, SAP BTP, cloud, integration, data, M&A and separation initiatives from design through deployment. Approve security solution designs, patterns, exceptions and high-risk access decisions in alignment with enterprise architecture and security policies. Define reusable security patterns and transition approaches that enable scalable global templates and clean-core transformation.

Risk, Compliance and Audit Readiness

Own SAP application-security risk identification, assessment, treatment and escalation, ensuring clear accountability and timely remediation. Maintain audit-ready controls and evidence for access governance, privileged access, role design, periodic reviews and security operations. Partner with Cybersecurity, Risk, Internal Controls, Audit, Privacy and business control owners to address findings and evolving requirements.

Operations, Monitoring and Incident Leadership

Govern security operations, monitoring, vulnerability remediation and response for SAP application-security events and control failures. Define service levels, quality measures and escalation paths for provisioning, role maintenance, access reviews and security incidents. Drive automation and analytics that improve control effectiveness, transparency, user experience and operational efficiency.

Vendor, Financial and Capability Leadership

Lead internal specialists and external partners, ensuring accountable delivery, strong quality controls, knowledge transfer and reduced key-person dependency. Own budget planni