SAP Security Expert

Merck Group; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Merck Group is seeking an experienced SAP Security Architect to lead end-to-end security across SAP S/4HANA and ECC ecosystems. The role focuses on defining role design, access controls, and cross-system security integration, with strong collaboration across Finance, Procurement, and HR functions.

You will drive risk management, governance, and security operations, including SoD analysis, compliance alignment, and continuous improvement of security processes.

Qualifications

• Deep understanding of SAP security and authorization concepts, including access control and data protection.
• Hands-on experience with SAP security administration and risk management (roles/profiles, provisioning, policy maintenance).
• Knowledge of security/compliance standards (e.g., GDPR, SOX).
• Proficiency with security tools, ABAP, and SAP security configurations.

Responsibilities

• Own end-to-end SAP security architecture across SAP S/4HANA and SAP ECC landscapes.
• Define and govern role design standards and authorization concepts.
• Manage user access provisioning, modifications, and de-provisioning; perform SoD analysis.
• Act as security process owner for SAP ERP environments, embedding security controls into business processes.
• Monitor SAP systems for security risks, vulnerabilities, and incidents; support remediation.

Skills

SAP security

Access control

Risk assessment

Security governance

Stakeholder management

Automation

Zero Trust

Tools

SAP S/4HANA

SAP ECC

Fiori

ABAP

SIEM

DevSecOps

SAP NetWeaver

SAP BTP

Job description

Work Your Magic with us!

Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us.

Your Role

Process and System Responsibility

• Enterprise SAP Security Strategy & Architecture Ownership-Own and lead the end-to-end security architecture across SAP S/4HANA and SAP ECC landscapes. Define and govern role design standards, authorization concepts, Fiori security architecture, and cross-system integration controls. Ensure alignment with enterprise security frameworks and business process requirements.
• Access Governance & Compliance Management- Manage user access provisioning, modifications, and de-provisioning in line with internal policies and regulatory standards (e.g., SOX, GDPR where applicable). Perform regular access reviews, SoD analysis, and audit support to ensure ongoing compliance.
• Process Ownership & Security Integration- Act as the security process owner for SAP ERP environments, embedding security controls into business processes such as Finance, Procurement, Supply Chain, and HR. Collaborate with functional teams to ensure secure configuration and change management practices.
• System Monitoring & Risk Management- Monitor SAP systems for security risks, vulnerabilities, and unauthorized activities. Conduct risk assessments, support remediation plans, and ensure timely resolution of security incidents related to SAP ERP platforms.
• Continuous Improvement & Stakeholder Collaboration- Drive continuous improvement of SAP security processes, including automation, Cybesecurity tool optimization, and documentation updates. Provide guidance and training to business users, IT teams, and management on SAP security best practices and governance standards.
• Implement and enforce Zero Trust – enable security principles within SAP ERP landscapes, ensuring strict identity verification, least-privilege access, and continuous authentication across SAP applications, users, and integrated systems. Learn the new trend, threat, and new challenges in cybersecurity area. Like Zero Trust, Double Zero

Leadership and Collaboration

• Security Leadership & Governance Stewardship- Provide strategic leadership for SAP security governance across S/4HANA and ECC platforms. Chair security review boards, define policy standards, and ensure consistent enforcement of global SAP access and control frameworks. Act as the escalation point for critical security and compliance decisions.
• Cross-Functional & Executive Collaboration- Partner closely with Business Process Owners, IT leadership, Internal Audit, Risk & Compliance, and external auditors to align SAP security with enterprise risk strategy. Translate technical security risks into business-impact language for executive stakeholders and steering committees.
• Transformation & Change- Lead security workstreams during SAP implementations, upgrades, rollouts, and S/4HANA and ECC transformation programs. Drive organizational change by promoting secure-by-design principles, influencing stakeholders, and ensuring security requirements are embedded early in project lifecycles

Impact and Performance Management

• Is accountable for the liaison & enablement team’s results, impacting performance of related Cybersecurity Operation teams through effective demand, capacity and change management.
• Defines and tracks key KPIs (e.g., demand throughput, lead times, change success rate, capacity utilization, compliance) and drives performance improvements.
• Develops and applies policies and guidelines to enhance cybersecurity operational efficiency and process consistency in Cybersecurity Operation liaison and enablement.
• Supports resource and capacity planning and provides regular reporting on demand, capacity and change status transparent.

Complex Problem-Solving

• Analyzing skills-Analyzes complex information (e.g., audit findings, security advisories, demand/capacity data, vendor input) to support sound decision-making.
• Sustanable and Reslience solution- Addresses operational challenges across demand, security, testing, release and lifecycle processes with sustainable solutions.

Strategic Impact and Accountability

• Aligns sector needs with organizational capabilities and strategic priorities in the Cybersecurity Operation domain, acting as key advisor on feasibility, impact and trade-offs.
• Ensures that Cybersecurity Operation demand and change portfolios adhere to cost, risk and compliance frameworks and related policies/standards.

Communication and Stakeholder Management

• Owns daily operational performance of the Cybersecurity Operation liaison & enablement team, including demand handling and operational governance.
• Work closely with Internal and External Audit and propose the new updated cybersecurity solution to leadership team.
• Sets clear objectives, manages performance and oversees reward outcomes in line with organizational policies.
• Proactively manages stakeholder expectations across LS, IT DES, sectors and internal teams, ensuring transparent communication on priorities, risks, costs and timelines.

Who You Are

• Minimum 3 years of experience in SAP solution consulting, with a strong track record in solution design, and full-cycle product implementations.
• Deep understanding of SAP security and authorization concepts, including access control, authentication and data protection.
• Hands‑on experience with SAP security administration and risk management (roles/profiles, provisioning, policy maintenance, risk assessment) and relevant security/compliance standards (e.g., NIS, KRITIS, GDPR, SOX).
• Proficiency with test and release management tools, ticketing systems, SAP security tools/transaction codes and ABAP for security‑related custom solutions and troubleshooting
• Need the cybersecrutiy knowledge or skills related to SAP framework-OS security, DB security, Firewall concept, SAP Netowrk zone design, Network infra knowledge, Vulnerability, SAP application design security, encryption, Cloud cybersecurity architecture. Data privace and Integrity, Data protection.
• Advanced certifications in SAP Security, SAP Architecture, or Service Management technologies (e.g., SAP Certified Technology Associate)
• Knowledge on SAP DevSecOps- Deep SAP Security & Architecture Expertise, strong knowledge of SAP platforms and security architecture, including: SAP S/4HANA, SAP NetWeaver, SAP BTP, and SAP Fiori, SAP transport management and secure configuration, SAP‑specific vulnerabilities and patch management. Integration of Security into DevSecOps Pipelines - Automating SAP code security scans (ABAP, UI5, integrations), Implementing security gates in pipelines, Supporting secure transport and release management, Implement continuous monitoring and compliance controls, SAP security monitoring and logging (SIEM integration), Compliance with standards such as ISO 27001, NIST, KRITS and GDPR, Managing identity governance and access risk analysis.

What we offer:

We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We believe that this variety drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress!