ERP Security IAM controls & Integrations

gsknch; Bengaluru; On-site; INR 2,500,000 - 5,500,000; Full time

Job summary

Haleon is seeking a Manager - ERP Security, IAM Controls & Integrations to lead identity and access governance across SAP and non-SAP platforms during a major SAP S/4HANA transformation.

You will shape RBAC, JML, and SoD controls, integrate SailPoint or Saviynt, implement SSO/MFA, and collaborate with ERP, GRC, HR and security teams to deliver secure, compliant access management.

Qualifications

• Experience in Identity Governance Administration (IGA), ERP security, SAP GRC Access Control, IAM controls and PAM.

Responsibilities

• Lead design and implementation of identity and access controls across SAP and connected applications.
• Define RBAC principles and access governance aligned to security and business needs.
• Integrate SAP applications with IAM/IGA solutions such as SailPoint or Saviynt.
• Drive Joiner-Mover-Leaver (JML) processes and lifecycle management with HR and security teams.
• Support SAP GRC Access Control setup, SoD risk analysis and audit readiness.

Job description

Welcome to Haleon. We're a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we've grown, evolved and are now entering an exciting new chapter - one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands - including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® - lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it's time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose - to deliver better everyday health with humanity - at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the Role

We are seeking a Manager - ERP Security, IAM Controls & Integrations to join a major SAP S/4HANA transformation programme. This role will be responsible for shaping and governing identity and access management controls across the ERP landscape, ensuring secure, compliant and scalable access management processes are embedded into the target operating model.

Working closely with ERP, CR&C, IAM engineering, 2nd line GRC team, and Technology Architecture teams, you will help design and implement identity controls across SAP and non-SAP platforms as part of Phoenix, supporting a modern, automated and risk-based approach to access governance.

This is an excellent opportunity for someone with experience in Identity Governance Administration (IGA), ERP security, SAP GRC Access Control, IAM controls, PAM, and enterprise identity integrations who enjoys working at the intersection of business transformation, technology, and security.

We recognize that candidates may bring expertise from different IAM platforms and SAP environments. We encourage applications from individuals with transferable experience and a desire to learn and grow.

Key Responsibilities

ERP Identity & Access Management

• Lead the design and implementation of identity and access controls across SAP and connected enterprise applications.
• Support the development of a scalable and sustainable ERP access management model aligned to business and security requirements.
• Define and govern role-based access control (RBAC) principles and access governance processes.
• Ensure least-privilege and segregation of duties principles are embedded into solution designs.
• Partner with business process owners and security teams to define access models that balance security, compliance and user experience.

Identity Governance Administration (IGA)

• Lead the integration of SAP applications and ERP platforms with enterprise IGA solutions such as SailPoint, Saviynt etc.
• Support implementation of automated access provisioning, certification, approvals and policy enforcement capabilities.
• Define identity governance requirements across workforce, contractor and third-party populations.
• Drive adoption of access review and attestation processes to strengthen control effectiveness.
• Support the design of target-state identity governance operating models.

Joiner, Mover, Leaver (JML) Controls

• Design and improve Joiner, Mover and Leaver (JML) processes across SAP and integrated applications, aligning to Sox and other cyber standards.
• Ensure access changes are automated, auditable and driven by authoritative identity sources.
• Identify opportunities to reduce manual activities and improve control effectiveness through automation.
• Work with HR, Identity and Security teams to establish robust identity lifecycle management processes.

SAP Security & GRC

• Collaborate with SAP Security teams to define security requirements for SAP S/4HANA and related SAP platforms.
• Support implementation and optimisation of SAP GRC Access Control capabilities.
• Contribute to Segregation of Duties (SoD) frameworks, risk analysis and mitigating controls.
• Support audit, compliance and assurance activities related to ERP access management.
• Provide guidance on SAP authorisations, access controls and governance processes.

PAM & Non-Human Identity Management

• Support governance of privileged access across ERP applications and supporting infrastructure including Emergency Access management (EAM) in SAP GRC AC.
• Partner with PAM teams to implement controls for privileged and emergency access.
• Contribute to the development of controls for service accounts, technical users, APIs, bots and other non-human identities.
• Help establish governance processes for the lifecycle management of non-human identities.

Authentication & Identity Integration

• Support implementation of Single Sign-On (SSO), Multi-Factor Authentication (MFA) and federation capabilities.
• Define identity integration requirements between SAP platforms and enterprise identity services.
• Work with architecture and engineering teams to implement secure identity flows across hybrid an