Global Senior Solution Engineer: SAP GRC
Biopharma Careers
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Sandoz is seeking an experienced SAP GRC SME to lead end-to-end governance of SAP Roles, Authorizations, and GRC processes across the SAP landscape. You will serve as the functional and technical authority for SAP access governance, ensuring SoD integrity and regulatory compliance.
Join a global, innovative biosimilar and generic medicines leader shaping digital transformation with security-first principles, risk-based access controls, and proactive remediation of audit findings.
Qualifications
- 15+ years of SAP Security, Roles & Authorizations, and GRC experience.
- Strong expertise in SAP ECC, S/4HANA, SAP GRC Access Control.
- Proven experience in global RBAC models and SoD.
- ITIL Foundation Certification and SAP certifications.
Responsibilities
- Own and govern SAP role design and access control framework across the enterprise SAP ecosystem.
- Lead global SoD controls and risk mitigation strategies.
- Ensure audit readiness and support regulatory inspections across SAP environments.
- Partner with Global Process Owners and IT organizations to communicate security and risk matters.
Skills
Education
Tools
Job description
The SAP GRC SME is accountable for the end-to-end ownership, governance, and continuous improvement of SAP Roles, Authorizations, and Governance, Risk & Compliance (GRC) processes across the enterprise SAP landscape. The role serves as the functional and technical authority for SAP access governance, ensuring regulatory compliance, segregation of duties (SoD) integrity, and risk-based access controls that support business operations and digital transformation initiatives.
Global Senior Solution Engineer: SAP GRC
Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!
The SAP GRC SME is accountable for the end-to-end ownership, governance, and continuous improvement of SAP Roles, Authorizations, and Governance, Risk & Compliance (GRC) processes across the enterprise SAP landscape. The role serves as the functional and technical authority for SAP access governance, ensuring regulatory compliance, segregation of duties (SoD) integrity, and risk-based access controls that support business operations and digital transformation initiatives.
Your responsibilities include, but are not limited to:
Own and govern the SAP role design, authorization concept, and access control framework across the enterprise SAP ecosystem. Serve as the primary Subject Matter Expert for SAP Security, Roles, Authorizations, and GRC solutions.
Define and maintain role design standards, authorization governance policies, and access management procedures.
Ensure role structures remain scalable, compliant, and aligned with evolving business processes.
Lead periodic reviews and optimization of user access and security models.
Accountable for global SAP GRC governance, including Access Risk Analysis, Emergency Access Management, Access Request Management, and Role Management processes.
Establish and maintain Segregation of Duties (SoD) controls and risk mitigation strategies.
Ensure adherence to internal control frameworks, regulatory requirements, and pharmaceutical compliance standards.
Lead remediation of audit findings and continuously enhance control effectiveness.
Develop governance mechanisms to proactively identify and mitigate access-related risks.
Act as the primary liaison for internal and external audits related to SAP security and access controls.
Support regulatory inspections and compliance assessments.
Ensure evidence collection, control documentation, and audit readiness across all SAP environments.
Drive closure of audit observations through sustainable corrective and preventive actions.
Partner with Global Process Owners, Compliance, Quality, Internal Controls, Audit, Digital & IT organizations.
Influence decision-making through expert guidance on security, risk, and compliance matters.
Communicate complex authorization and risk topics to both technical and business audiences.
Stable -compliant -secure -and cost-effective operations measured by Availability -Performance -Capacity Metrics along with continuous cost reductions YOY -Responsiveness and Recovery Speed of critical incidents / issues in business -Automation led Programmable Infrastructure and Platform Services
- 15+ years of experience in SAP Security, Roles & Authorizations, and SAP GRC.
- Strong expertise in SAP ECC, S/4HANA, SAP GRC Access Control, and enterprise authorization concepts.
- Proven experience designing and governing global role-based access control models.
- Deep understanding of Segregation of Duties (SoD), risk management, and audit requirements.
- ITIL Foundation Certification.
- SAP Security and/or SAP GRC certifications.
- Experience with SAP S/4HANA transformation programs.
- Experience with Identity & Access Management (IAM) solutions and enterprise security frameworks.
- Pharmaceutical, Life Sciences, Healthcare, Manufacturing, or other regulated industry experience is a plus but not mandatory.
- Exposure to GxP-compliant or validated environments is advantageous.
- Deep knowledge of SAP Roles & Authorizations design and governance
- Ability to translate business requirements into security solutions
- Role-based access control (RBAC) design and optimization
- Authorization troubleshooting and risk assessment.
- Security architecture and secure-by-design principle
- IT Service Management.
- Problem Solving Skills.
- System Integration.
- Vendor Management.
Bachelor’s degree in Computer Science, Information Technology or related disciplines
Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more!
With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.
Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported!
- Communication Skills
- IT Infrastructures
- IT Operations
- IT Service Management
- Problem Solving Skills
- System Integration
- Vendor Management
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
