ERP Solution Architect Process & Access Control

Roche; Madrid; On-site; EUR 110,000 - 150,000; Full time

Job summary

Roche in Madrid is seeking a Solution Architect to design, govern, and deliver business-driven architectures across SAP GRC and ERP environments. You will ensure architectures meet business priorities, enterprise standards, and non-functional requirements while guiding product and engineering teams toward scalable, secure solutions.

The role emphasizes governance, risk mitigation, and a strong focus on data protection, ICFR, and GxP compliance, collaborating with security, IT, and business

Qualifications

• Deep SAP GRC and ERP security architecture knowledge.
• Experience aligning architecture with enterprise standards and business priorities.
• Proven ability to design scalable, secure integration patterns.

Responsibilities

• Lead architecture-related problem solving for security and compliance challenges.
• Define and maintain architectural roadmap and guardrails across SAP landscapes.
• Collaborate with product management and engineering to ensure NFRs are baked into designs.
• Engage stakeholders across business, security, and IT to communicate decisions clearly.
• Drive reference architectures, patterns, and governance for enterprise solutions.

Skills

SAP GRC

Security architecture

ITIL

Data modeling

Architectural governance

Vendor assessments

Tools

SAP GRC Platform

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Solution Architect focuses on maximizing product and system value by designing, governing, and delivering business-driven, standards-based, and future-ready architectures within a complex, multiple solution context. In this role, you will ensure that architectural designs align with business priorities and enterprise standards while balancing functional requirements with non-functional requirements (NFRs). You will maintain the architectural vision and roadmap, collaborate closely with engineering and product teams, and continuously improve the ecosystem through technical innovation, risk mitigation, and robust governance.

The Opportunity

Architecture and Governance for ERP Process, Access, and Security Controls. Lead the architectural lifecycle management of SAP GRC Platform. The mission is to design a robust, scalable control environment that secures sensitive data, minimizes technical debt, and streamlines audit readiness. This role ensures that architectural patterns and security controls are consistently applied across the SAP ERP landscape to meet strict compliance requirements for GxP, Internal Control over Financial Reporting (ICFR), and Data Privacy & Protection.

• Scope / (Content Leadership): Defines and owns the architectural blueprint and reference patterns to ensure delivery of solutions that meet business priorities and enterprise standards. Ensures Non-Functional Requirements (NFRs) - such as scalability, performance, and security - are baked into the core design. Collaborates with product management and engineering teams to align technical evolution with enterprise governance
• Accountability / Problem Solving: Leads architecture-related problem solving for complex security and compliance challenges using data, threat modeling, and stakeholder input. Maintains the technical vision, architectural roadmap, and guardrails. Assesses the architectural impacts, dependencies, and risks of new initiatives across the broader application landscape
• Stakeholder Management: Engages and aligns stakeholders across business, security, and IT. Communicates complex technical concepts, trade-offs, and architectural decisions clearly to both technical and non-technical audiences
• Impact / Strategy: Defines and maintains the technical and integration roadmap aligned with the overarching business strategy. Reviews and guides feature implementation to maximize value delivery while ensuring long-term system sustainability. Continuously improves the architectural landscape and supports the secure adoption of new capabilities
• Complexity / (Product Size): Operates within a Complex, Multi-Instance, or Multiple Solution and Product Context
• Business / Technical Ability: Applies expert-level functional and technical understanding of SAP security architectures to drive design decisions and collaborates deeply with engineering and development teams to guide implementation

Who you are

• Deep understanding of SAP GRC Process & Access Control architecture and how they integrate seamlessly with complex ERP systems
• Strong background in IT Service Management / ITIL to manage service delivery and system integrity
• Very good understanding of ERP specific compliance requirements, incl. Computerized System Validation (CSV), ICFR, Data Protection/Privacy

Education / Experience

• Demonstrated experience leading technical teams in designing business-driven, standards-based, future-ready architectures within a complex or multiple solution/product context
• Experience maintaining the technical vision, architectural roadmap, and current state documentation for multiple enterprise solutions, including assessing the impact of initiatives on capabilities, risk, and application landscapes
• Proven track record of proactively contributing to the development of enterprise architecture practices, establishing design patterns, and mentoring engineering teams

Technical Skills

• In-depth and expert-level knowledge in multiple security, compliance, and SAP technology areas
• Proficiency in creating Conceptual & Logical Data Models, Taxonomies, Ontologies, and highly secure Integration Pathways for enterprise products
• Ability to define, document, and drive Reference Architectures, Design Patterns, NFRs, and fitness functions
• Strong capability to evaluate external technology trends, assess feasibility for multiple interconnected solutions, and conduct rigorous technical vendor assessments

Additional Qualifications

• Exceptional communication and negotiation skills, with the ability to articulate difficult technical concepts and influence diverse stakeholders to adopt alternative architectural perspectives
• Proactive mindset to identify opportunities to enhance security value, improve existing architectures, aggressively manage technical debt, and lead teams in identifying innovative, compliant solutions

Where pay transparency applies, details are provided based on the primary posting location. For this role, the primary location is Madrid. If you are interested in additional locations where the role may be available, we will provide the relevant compensation details later in the hiring process.

Who we are

A healthier future drives us to innovate. Together, more than 100'000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let's build a healthier future, together.

Roche is an Equal Opportunity Employer.