Global Head SAP SIAM

IN04 (FCRS = IN004) Sandoz Private Limited; Telangana; Sur place; INR 6 000 000 - 10 000 000; Plein temps

Résumé du poste

Sandoz Private Limited seeks a Global Lead SAP Security, Identity & Authorisation to define and deliver the enterprise SAP security strategy across BAU, transformation, and M&A activities. You will lead role design, controls, and governance, embedding security-by-design into S/4HANA and cloud transformations, while aligning with cybersecurity requirements.

The role requires 15+ years in SAP security, strong leadership, and collaboration with risk, audit and business stakeholders across global

Qualifications

• 15+ years of SAP security, identity and authorization management experience, including leadership in global environments.
• Expertise in SAP role design, authorizations, segregation of duties, privileged access and access governance.
• Experience securing SAP S/4HANA or ECC, SAP BTP, cloud services and major transformation programs.
• Strong understanding of identity lifecycle management, least privilege and access monitoring.
• Proven collaboration with Cybersecurity, Risk, Internal Controls, Audit and stakeholders in regulated environments.

Responsabilités

• Define and evolve the global SAP security, identity and authorization strategy and roadmap.
• Own governance for joiner/mover/leaver controls and access recertification.
• Lead security architecture across S/4HANA, SAP BTP, cloud, data and M&A initiatives.
• Maintain audit-ready controls and evidence for access governance and privileged access.
• Drive security operations, metrics and continuous improvement.

Connaissances

Leadership

Strategic thinking

Security governance

SAP security

Identity management

Risk management

Formation

Bachelor’s degree in Cybersecurity/CS/IT or related field

Master’s degree preferred

Outils

SAP S/4HANA

SAP BTP

GRC

Cloud services

Description du poste

Job Description Summary

This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance. The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.

Job Description

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!

Job Summary

This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance. The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.

Your Key Responsibilities

Your responsibilities include, but are not limited to:

Major accountabilities:

Security Strategy, Roadmap and Business Value

• Define and continuously evolve the global SAP security, identity and authorization strategy, target architecture and multi-year roadmap.
• Align security priorities with enterprise cybersecurity direction, SAP CoE objectives, regulatory expectations and business transformation needs.
• Provide executive-level visibility of security posture, material risks, remediation progress, control effectiveness and investment priorities.

Identity, Role Design and Access Governance

• Own global SAP role-design principles, authorization standards and governance for business, technical and privileged access.
• Establish consistent joiner, mover and leaver controls, request and approval workflows, access recertification and timely deprovisioning expectations.
• Govern segregation-of-duties rules, mitigating controls, emergency access and privileged access management across SAP environments.

Security Architecture and Transformation Enablement

• Embed security-by-design into S/4HANA, SAP BTP, cloud, integration, data, M&A and separation initiatives from design through deployment.
• Approve security solution designs, patterns, exceptions and high-risk access decisions in alignment with enterprise architecture and security policies.
• Define reusable security patterns and transition approaches that enable scalable global templates and clean-core transformation.

Risk, Compliance and Audit Readiness

• Own SAP application-security risk identification, assessment, treatment and escalation, ensuring clear accountability and timely remediation.
• Maintain audit-ready controls and evidence for access governance, privileged access, role design, periodic reviews and security operations.
• Partner with Cybersecurity, Risk, Internal Controls, Audit, Privacy and business control owners to address findings and evolving requirements.

Operations, Monitoring and Incident Leadership

• Govern security operations, monitoring, vulnerability remediation and response for SAP application-security events and control failures.
• Define service levels, quality measures and escalation paths for provisioning, role maintenance, access reviews and security incidents.
• Drive automation and analytics that improve control effectiveness, transparency, user experience and operational efficiency.

Vendor, Financial and Capability Leadership

• Lead internal specialists and external partners, ensuring accountable delivery, strong quality controls, knowledge transfer and reduced key-person dependency.
• Own budget planning, forecasting, SOW and invoice governance, vendor performance and investment choices for the SAP security portfolio.
• Build a sustainable SAP security capability through coaching, standards, communities of practice and succession planning.

Minimum Requirements

• 15+ years of experience in SAP security, identity and authorization management, including leadership in complex global environments.
• Demonstrated expertise in SAP role design, authorizations, segregation of duties, privileged access, access governance and security controls.
• Experience securing SAP S/4HANA or ECC, SAP BTP, cloud services, integrations and major transformation programs.
• Strong understanding of identity lifecycle management, least privilege, access certification, emergency access and security monitoring.
• Proven experience working with Cybersecurity, Risk, Internal Controls, Audit, Privacy and business stakeholders in regulated environments.
• Experience leading global teams, managed services, system integrators and multi-partner security delivery models.
• Ability to translate cyber and control risks into executive decisions, investment priorities and practical remediation plans.
• Proven budget, vendor, SOW, service-level and performance-management capability.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field; Master’s degree preferred.
• Relevant SAP security, identity, GRC, cybersecurity or audit certifications strongly preferred.

Why Sandoz?

Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more! With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.

Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported!

Skills Desired

• Agile Project Management
• Business Partnering
• Change Management
• IT Service Delivery
• Performance Management
• Talent Development

Our Purpose here at Sandoz is pioneering access for patients.

As the global leader in 'off-patent' high quality medicines, we are able to make medicine more affordable and accessible. Our broad global portfolio comprises of approximately 1,300 quality biosimilar and generic medicines, enabling us to provide more than 900 million patient treatments across 100+ countries per year, and while we are proud of this achievement, we have an ambition to do more! Powered by our talented and ambitious colleagues, who, in return for dedication and skills, experience a flexible, collaborative & inclusive culture where diversity of thought is welcomed and where personal growth is nurtured!