Global Senior Solution Engineer: SAP GRC

Sandoz; Telangana; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

Sandoz seeks a Global Senior Solution Engineer: SAP GRC to own end-to-end SAP security, roles, and GRC governance across the enterprise. You will drive access control frameworks, SoD controls, and audit-ready processes in a regulated biopharma environment.

The role requires 15+ years in SAP Security/Authorizations, S/4HANA experience, and IAM familiarity. This senior position offers a global, secure, hybrid work model and opportunities to shape governance across multiple regions.

Qualifications

• 15+ years of SAP Security, Roles & Authorizations, and SAP GRC.
• Expertise in SAP ECC/S/4HANA and enterprise authorization concepts.
• Proven global role-based access control design experience.
• Understanding of SoD, risk management and audit needs.

Responsibilities

• Own and govern SAP role design, authorization concepts, and access controls.
• Define role design standards, governance policies, and access procedures.
• Lead periodic reviews and optimization of user access and security models.
• Ensure global GRC governance, including Access Risk Analysis and EAM.
• Maintain SoD controls and risk mitigation strategies.
• Ensure regulatory compliance and audit readiness across SAP environments.
• Partner with Global Process Owners and IT/security stakeholders.

Skills

SAP RBAC design

GRC governance

SoD controls

Access management

Regulatory compliance

Security architecture

Stakeholder communication

ITIL knowledge

Identity & Access Management

RBAC optimization

Education

Bachelor's degree in Computer Science/IT

Tools

SAP ECC

SAP S/4HANA

GRC Access Control

IAM solutions

Job description

Global Senior Solution Engineer: SAP GRC

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!

Job Summary

The SAP GRC SME is accountable for the end-to-end ownership, governance, and continuous improvement of SAP Roles, Authorizations, and Governance, Risk & Compliance (GRC) processes across the enterprise SAP landscape. The role serves as the functional and technical authority for SAP access governance, ensuring regulatory compliance, segregation of duties (SoD) integrity, and risk-based access controls that support business operations and digital transformation initiatives.

Your Key Responsibilities

Your responsibilities include, but are not limited to:

Major accountabilities:

• Own and govern the SAP role design, authorization concept, and access control framework across the enterprise SAP ecosystem. Serve as the primary Subject Matter Expert for SAP Security, Roles, Authorizations, and GRC solutions.
• Define and maintain role design standards, authorization governance policies, and access management procedures.
• Ensure role structures remain scalable, compliant, and aligned with evolving business processes.
• Lead periodic reviews and optimization of user access and security models.
• Governance, Risk & Compliance (GRC)Accountable for global SAP GRC governance, including Access Risk Analysis, Emergency Access Management, Access Request Management, and Role Management processes.
• Establish and maintain Segregation of Duties (SoD) controls and risk mitigation strategies.
• Ensure adherence to internal control frameworks, regulatory requirements, and pharmaceutical compliance standards.
• Lead remediation of audit findings and continuously enhance control effectiveness.
• Develop governance mechanisms to proactively identify and mitigate access-related risks.

SAP Security & Authorization Ownership

• Own and govern the SAP role design, authorization concept, and access control framework across the enterprise SAP ecosystem. Serve as the primary Subject Matter Expert for SAP Security, Roles, Authorizations, and GRC solutions.
• Define and maintain role design standards, authorization governance policies, and access management procedures.
• Ensure role structures remain scalable, compliant, and aligned with evolving business processes.
• Lead periodic reviews and optimization of user access and security models.
• Governance, Risk & Compliance (GRC)Accountable for global SAP GRC governance, including Access Risk Analysis, Emergency Access Management, Access Request Management, and Role Management processes.
• Establish and maintain Segregation of Duties (SoD) controls and risk mitigation strategies.
• Ensure adherence to internal control frameworks, regulatory requirements, and pharmaceutical compliance standards.
• Lead remediation of audit findings and continuously enhance control effectiveness.
• Develop governance mechanisms to proactively identify and mitigate access-related risks.

Compliance & Audit Management

• Act as the primary liaison for internal and external audits related to SAP security and access controls.
• Support regulatory inspections and compliance assessments.
• Ensure evidence collection, control documentation, and audit readiness across all SAP environments.
• Drive closure of audit observations through sustainable corrective and preventive actions.

Stakeholder Management

• Partner with Global Process Owners, Compliance, Quality, Internal Controls, Audit, Digital & IT organizations.
• Influence decision-making through expert guidance on security, risk, and compliance matters.
• Communicate complex authorization and risk topics to both technical and business audiences.

Key performance indicators:

• Stable -compliant -secure -and cost-effective operations measured by Availability -Performance -Capacity Metrics along with continuous cost reductions YOY -Responsiveness and Recovery Speed of critical incidents / issues in business -Automation led Programmable Infrastructure and Platform Services

What you'll bring to the role:

• 15+ years of experience in SAP Security, Roles & Authorizations, and SAP GRC.
• Strong expertise in SAP ECC, S/4HANA, SAP GRC Access Control, and enterprise authorization concepts.
• Proven experience designing and governing global role-based access control models.
• Deep understanding of Segregation of Duties (SoD), risk management, and audit requirements.
• ITIL Foundation Certification.
• SAP Security and/or SAP GRC certifications.
• Experience with SAP S/4HANA transformation programs.
• Experience with Identity & Access Management (IAM) solutions and enterprise security frameworks.
• Pharmaceutical, Life Sciences, Healthcare, Manufacturing, or other regulated industry experience is a plus but not mandatory.
• Exposure to GxP-compliant or validated environments is advantageous.

Skills:

• Deep knowledge of SAP Roles & Authorizations design and governance
• Ability to translate business requirements into security solutions
• Role-based access control (RBAC) design and optimization
• Authorization troubleshooting and risk assessment.
• Security architecture and secure-by-design principle
• IT Service Management.
• Problem Solving Skills.
• System Integration.

Qualifications

• Bachelor's degree in Computer Science, Information Technology or related disciplines

Why Sandoz?

Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more!

With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.

Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported!

This site is intended for a global audience