SAP Application Security Analyst

Novo Nordisk India Pvt Ltd; Bengaluru; Híbrido; INR 1.200.000 - 1.800.000; Tempo integral

Benefícios oferecidos por esta vaga

Hybrid work model

Resumo da vaga

Novo Nordisk India Pvt Ltd in Bangalore is seeking a hands-on SAP Application Security Analyst to turn Security Bridge alerts into prioritized actions protecting the SAP landscape across finance, supply chain, manufacturing, quality, and R&D. You will investigate suspicious activity, drive remediation, and help redesign S/4HANA roles around least-privilege access.

You will work within the SAP Security & Authorizations team, collaborating with Basis, ABAP developers and other IT and business

Qualificações

• Bachelor’s degree in Computer Science, Engineering, Information Security or related discipline, or equivalent practical experience.
• Five or more years of SAP security, Basis security or SAP cybersecurity experience, including hands‑on investigation and remediation.
• Hands‑on PFCG role design, build, troubleshooting and controlled deployment in SAP S/4HANA or ECC, with strong knowledge of authorization objects, organizational levels, and single, composite and master‑derived roles.
• Practical experience with Security Bridge dashboards, threat alerts, vulnerability findings and patch recommendations.
• Experience with SU24, SU53, STAUTHTRACE, SUIM and AGR_1251 analysis, plus working knowledge of Fiori launchpad content and backend authorisations.
• A sound understanding of S/4HANA and ECC architecture, RFC connections, SAP Gateway/Fiori and HANA security fundamentals.
• Experience reviewing SAP security logs and privileged or technical‑account activity, and working knowledge of SAP Security Notes, hardening and transports across development, QA and production.
• Clear written and spoken English, structured analytical skills and the ability to explain technical risks to technical and business audiences.

Responsabilidades

• Triage SecurityBridge alerts, separate suspicious activity from expected business or administrative actions, and correlate findings with SAP and HANA logs; escalate incidents to SOC and SAP owners.
• Validate vulnerabilities against installed components and business usage, prioritise by severity, exposure and criticality, and drive remediation tickets with clear owners and due dates.
• Rescan or retest after changes, attach evidence and document compensating controls and residual risk where immediate correction is not feasible.
• Join workshops with functional teams and key users, prepare role‑design workbooks, and assess proposed access against least privilege and segregation of duties.
• Build and maintain approved PFCG roles, Fiori catalogue, space and page assignments and related authorisations, moving changes through development, QA and production.
• Keep SecurityBridge auditable: check system coverage and data freshness, tune alerts with documented approval, support SIEM and ITSM integration, and report on response times and finding age in line with SOX/ITGC and GxP procedures.

Conhecimentos

SAP security

Basis security

SAP cybersecurity

PFCG role design

S/4HANA / ECC

Authorization objects

Security Bridge dashboards

Threat alerts

Vulnerability findings

SU24

SU53

STAUTHTRACE

SUIM

AGR_1251 analysis

Fiori launchpad

Backend authorisations

RFC connections

HANA security

Security Notes & hardening

Change transports

English communication

Formação

Bachelor’s degree in Computer Science or related field

Ferramentas

Security Bridge

S/4HANA tooling

Descrição da vaga

System Specialist I- SAP Application Security Department- SAP Security & Authorizations

Location: Novo Nordisk Global Business Services (GBS), Bangalore

Your impact begins here As SAP Application Security Analyst, you will turn Security Bridge alerts and assessment findings into prioritised, traceable action that protects the SAP landscape behind Novo's finance, supply chain, manufacturing, quality and R&D processes. You will investigate suspicious activity, follow fixes through to verified closure and help redesign S/4HANA roles around least-privilege access. Your work reduces risk in regulated, business-critical systems, so colleagues can keep delivering progress for people living with serious chronic diseases.

What you’ll bring

• A bachelor's degree in Computer Science, Engineering, Information Security or a related discipline, or equivalent practical experience.
• Five or more years of SAP security, Basis security or SAP cybersecurity experience, including hands‑on investigation and remediation.
• Hands‑on PFCG role design, build, troubleshooting and controlled deployment in SAP S/4HANA or ECC, with strong knowledge of authorization objects, organizational levels, and single, composite and master‑derived roles.
• Practical experience with Security Bridge dashboards, threat alerts, vulnerability findings and patch recommendations.
• Experience with SU24, SU53, STAUTHTRACE, SUIM and AGR_1251 analysis, plus working knowledge of Fiori launchpad content and backend authorisations.
• A sound understanding of S/4HANA and ECC architecture, RFC connections, SAP Gateway/Fiori and HANA security fundamentals.
• Experience reviewing SAP security logs and privileged or technical‑account activity, and working knowledge of SAP Security Notes, hardening and transports across development, QA and production.
• Clear written and spoken English, structured analytical skills and the ability to explain technical risks to technical and business audiences.

Useful, but not essential

• Security Bridge configuration, detection‑content tuning or SIEM/ITSM integration.
• SAP GRC Access Control or similar tooling, and segregation of duties analysis.
• Experience in regulated or pharmaceutical environments, including SOX/ITGC controls and GxP change control.
• Rollout of redesigned roles across business units or countries, including cutover and hypercare; SAP BTP and integration security; relevant SAP or cybersecurity certifications.

What you’ll do

You will work as a hands‑on individual contributor, within agreed security standards, access permissions and change‑management processes.

• Monitor and investigate: triage SecurityBridge alerts, separate suspicious activity from expected business or administrative actions, and correlate findings with SAP and HANA logs. Escalate suspected incidents to the SOC and SAP owners within agreed timelines.
• Prioritise and remediate: validate vulnerabilities against your installed components and business usage, prioritise by severity, exposure and criticality, and drive remediation tickets with clear owners and due dates.
• Verify closure: rescan or retest after changes, attach evidence and document compensating controls and residual risk where immediate correction is not feasible.
• Support S/4HANA role redesign: join workshops with functional teams and key users, prepare role‑design workbooks, and assess proposed access against least privilege and segregation of duties.
• Build and maintain approved PFCG roles, Fiori catalogue, space and page assignments and related authorisations, moving changes in a controlled way through development, QA and production.
• Keep SecurityBridge sharp and auditable: check system coverage and data freshness, tune alerts with documented approval, support SIEM and ITSM integration, and report on response times and finding age in line with SOX/ITGC and GxP procedures.

Who you’ll work with

You will join the SAP Security & Authorizations team in Enterprise IT & Quality, where colleagues work across the Novo value chain to deliver trusted technology, high quality and responsible ways of working. The team supports security architecture, access governance and operational security across a global SAP landscape serving business‑critical and GxP‑regulated processes. Your closest partner is the SAP Security Architect, who you will agree priorities with and escalate design changes and unresolved risk to. You will also work with Basis, HANA database administrators, ABAP developers, business application teams, cybersecurity/SOC, functional teams, key users and external service providers. Clear ownership and open, timely communication keep findings and role changes moving, so risk is reduced faster.

What you can expect here

You will be trusted to own your work, with clear expectations and the support to perform at your best. You will build new skills across SAP security, access governance and monitoring, and see your contribution in measurable risk reduction across a global landscape. Your voice counts: you will be encouraged to share your expertise and challenge how things are done, then commit and move forward together.

Location: Bangalore Work Mode: Hybrid (3 days)

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.

Experience Level Mid Level