Senior Manager – Access Governance (m/f/d)

Fresenius Kabi; Barcelona; On-site; EUR 90,000 - 120,000; Full time

Job summary

Fresenius Kabi in Barcelona is seeking a Senior Manager Access Governance to join our IT Compliance & Risk Management team. You will help ensure that access across critical applications, SAP environments, and identity systems is secure, auditable, and compliant, balancing operational needs with policy requirements.

You will lead enterprise and SAP authorization governance, drive risk-based access controls, support audits, and collaborate with IT, security, risk, and business functions to

Qualifications

• Extensive hands-on experience in identity and access management and access governance.
• Experience with SAP security concepts and SAP GRC Access Control.
• Proven ability to lead audits and prepare evidence for audits.
• Strong understanding of SoD, least privilege, and access reviews.

Responsibilities

• Develop and maintain enterprise access governance framework across apps, IT platforms, identity systems, and SAP environments.
• Ensure full lifecycle access management: requests, approvals, provisioning, recertification, SoD, remediation.
• Oversee SAP role and authorization concepts and GRC processes across SAP ECC/S/4HANA.
• Coordinate periodic access and mitigation control reviews; drive findings remediation.
• Provide governance documentation and training to stakeholders.
• Collaborate with IAM, information security, IT operations, SAP, risk, audit, legal, privacy and external partners.
• Improve and automate recurring governance activities to increase efficiency.

Skills

Identity & Access Management

Access Governance

SAP Security

GRC / Compliance

Role-based Access Control

Audit Readiness

Stakeholder Communication

Education

Master's degree in IT/CS

Tools

SailPoint

Microsoft Entra ID

Saviynt

ServiceNow

CyberArk

SAP GRC Access Control

SAP ECC / S/4HANA

Job description

About The Role

As Senior Manager Access Governance, you will join the internal IT Compliance & Risk Management Team at Fresenius Kabi and help ensure that access across business-critical applications, identity systems, and SAP environments is secure, compliant, and fully auditable.

The role brings together enterprise access governance and SAP authorization governance in a regulated environment. Working closely with IT, information security, risk, compliance, and business functions, you will support a consistent, risk-based approach that balances operational needs with internal policies, audit expectations, and applicable regulatory requirements, including GxP where relevant.

Your Responsibilities

• In this role, you will play an important part in developing and maintaining our enterprise access governance framework across business-critical applications, IT platforms, identity systems, and SAP environments. Your work will cover the relevant policies, standards, role design principles, approval rules, and access lifecycle controls.
• One of your core responsibilities will be to ensure that access is managed consistently throughout its full lifecycle. This includes access requests, approvals, provisioning, user lifecycle management, recertification, privileged and emergency access, segregation of duties (SoD), mitigation controls, and remediation tracking.
• SAP authorization governance will be a central part of your role. You will work across SAP ECC, SAP S/4HANA, and related SAP landscapes and oversee SAP role and authorization concepts as well as the relevant SAP GRC access control processes, including access risk analysis, access request & emergency access management, business bole management, and SoD risk management.
• When complex or high-risk access situations arise, you will assess them carefully against the principles of least privilege, need-to-know, traceability, auditability, and segregation of duties. You will also coordinate periodic user access, role, privileged access, and mitigation control reviews and ensure that findings and corrective actions are followed through.
• Your expertise will support internal and external audits through clear governance documentation, reliable evidence, and well-founded explanations of access controls. At the same time, you will provide practical guidance and training to role owners, application owners, access approvers, business process owners, and other stakeholders involved in access governance.
• Close collaboration will be essential to your work. You will coordinate with teams across identity and access management, information security, IT operations, SAP, risk, controls, audit, validation, quality, legal, privacy, and compliance, as well as with relevant business stakeholders and external service partners.
• You will also help make access governance more efficient and transparent by improving and automating recurring activities. This work should lead to more consistent role design, higher-quality access requests and approvals, fewer SoD risks and high-risk access violations, and faster remediation of findings. Clear reporting on access risks, compliance metrics, control effectiveness, remediation progress, and audit readiness will create transparency for management.

What You Bring

• You hold a Master's degree or an equivalent qualification in IT/CS, BA etc.
• You bring several years of relevant experience in identity and access management, access governance, IT compliance or audit, internal controls, SAP Security, SAP authorization governance, or SAP GRC. This includes practical experience in regulated enterprise environments and in preparing audit-ready evidence for internal or external audits.
• Your expertise covers role-based access control, identity and user lifecycle management, privileged access, segregation of duties, critical and emergency access, access reviews, and role design.
• Strong knowledge of SAP authorization concepts, SAP ECC, SAP S/4HANA, complex SAP landscapes, and SAP GRC Access Control is essential for this role.
• You understand IT general controls, information security, internal control frameworks, and risk and compliance management. This enables you to assess complex access risks and translate governance or regulatory requirements into practical controls.
• You communicate and present complex topics clearly and work confidently with technical, business, and assurance stakeholders. You can provide functional leadership, influence decisions, and document recommendations accurately. Sound judgment, analytical thinking, and a high level of ownership are important parts of how you work.

Additional Experience We Value

• Relevant certifications such as CISA, CISM, CISSP, CRISC, SAP, or identity governance certifications.
• Experience in regulated industries (e.g., life sciences, pharma, healthcare, medical devices) with knowledge of GxP, data integrity, computerized system validation, FDA 21 CFR Part 11, EU GMP Annex 11, SOX-like controls, or GDPR.
• Experience with identity governance, privileged access, and workflow tools (e.g., SailPoint, Microsoft Entra ID, Saviynt, ServiceNow, CyberArk) and SAP security solutions (e.g., SAP Fiori, SAP HANA authorizations, SAP Cloud IAG).

Why join our team?

At Fresenius Kabi, compliance and quality are the foundation of our mission to improve patient care worldwide. In this role, you will have a direct impact on the security and reliability of critical IT systems that support our global operations. You will work closely with international teams and contribute to the continuous development of a strong, future oriented compliance landscape.