System Specialist I- SAP Application Security

Novo Nordisk A/S; Bengaluru; Híbrido; INR 1 200 000 - 1 800 000; Tempo integral

Resumo da oferta

Novo Nordisk A/S seeks a System Specialist I in SAP Application Security to convert alerts and findings into prioritized actions protecting SAP landscapes across finance, supply chain, manufacturing, quality, and R&D processes.

You will investigate activity, guide fixes to closure, and help redesign S/4HANA roles for least privilege. Strong English and SAP security exposure are essential.

Qualificações

• Bachelor's degree in Computer Science, Engineering or related discipline or equivalent.
• Five+ years SAP security or BASIS security experience with hands-on investigation.
• Hands-on PFCG role design and deployment in S/4HANA or ECC.

Responsabilidades

• Triage SecurityBridge alerts and investigate suspicious activity.
• Prioritize and remediate vulnerabilities with clear owners and dates.
• Verify closure with retesting and evidence documentation.
• Support S/4HANA role redesign ensuring least privilege and segregation of duties.
• Maintain PFCG roles and related authorizations across environments.

Conhecimentos

SAP security experience

PFCG role design

Security Bridge dashboards

Fiori launchpad knowledge

English communication

Formação académica

Bachelor's degree in CS/Engineering or related

Ferramentas

Security Bridge

SU24/SU53 analysis

S/4HANA/ECC security

Descrição da oferta de emprego

Select how often (in days) to receive an alert: Create Alert

System Specialist I- SAP Application Security

Category: Digital & IT

Location: Bangalore, Karnataka, IN

Department- SAP Security & Authorizations

Your impact begins here

As SAP Application Security Analyst, you will turn Security Bridge alerts and assessment findings into prioritised, traceable action that protects the SAP landscape behind Novo's finance, supply chain, manufacturing, quality and R&D processes. You will investigate suspicious activity, follow fixes through to verified closure and help redesign S/4HANA roles around least-privilege access. Your work reduces risk in regulated, business-critical systems, so colleagues can keep delivering progress for people living with serious chronic diseases.

What you’ll bring

You are a hands-on SAP security professional who can explain a risk, fix it and prove it is closed. You bring:

• A bachelor's degree in Computer Science, Engineering, Information Security or a related discipline, or equivalent practical experience.
• Five or more years of SAP security, Basis security or SAP cybersecurity experience, including hands‑on investigation and remediation.
• Hands‑on PFCG role design, build, troubleshooting and controlled deployment in SAP S/4HANA or ECC, with strong knowledge of authorization objects, organizational levels, and single, composite and master‑derived roles.
• Practical experience with Security Bridge dashboards, threat alerts, vulnerability findings and patch recommendations.
• Experience with SU24, SU53, STAUTHTRACE, SUIM and AGR_1251 analysis, plus working knowledge of Fiori launchpad content and backend authorizations.
• A sound understanding of S/4HANA and ECC architecture, RFC connections, SAP Gateway/Fiori and HANA security fundamentals.
• Experience reviewing SAP security logs and privileged or technical‑account activity, and working knowledge of SAP Security Notes, hardening and transports across development, QA and production.
• Clear written and spoken English, structured analytical skills and the ability to explain technical risks to technical and business audiences.

Useful, but not essential:

• Security Bridge configuration, detection‑content tuning or SIEM/ITSM integration.
• SAP GRC Access Control or similar tooling, and segregation of duties analysis.
• Experience in regulated or pharmaceutical environments, including SOX/ITGC controls and GxP change control.
• Rollout of redesigned roles across business units or countries, including cutover and hypercare; SAP BTP and integration security; relevant SAP or cybersecurity certifications.

What you’ll do

You will work as a hands‑on individual contributor, within agreed security standards, access permissions and change‑management processes.

• Monitor and investigate: triage SecurityBridge alerts, separate suspicious activity from expected business or administrative actions, and correlate findings with SAP and HANA logs. Escalate suspected incidents to the SOC and SAP owners within agreed timelines.
• Prioritise and remediate: validate vulnerabilities against your installed components and business usage, prioritise by severity, exposure and criticality, and drive remediation tickets with clear owners and due dates.
• Verify closure: rescan or retest after changes, attach evidence and document compensating controls and residual risk where immediate correction is not feasible.
• Support S/4HANA role redesign: join workshops with functional teams and key users, prepare role‑design workbooks, and assess proposed access against least privilege and segregation of duties.
• Build and maintain approved PFCG roles, Fiori catalogue, space and page assignments and related authorizations, moving changes in a controlled way through development, QA and production.
• Keep SecurityBridge sharp and auditable: check system coverage and data freshness, tune alerts with documented approval, support SIEM and ITSM integration, and report on response times and finding age in line with SOX/ITGC and GxP procedures.

Who you’ll work with

You will join the SAP Security & Authorizations team in Enterprise IT & Quality, where colleagues work across the Novo value chain to deliver trusted technology, high quality and responsible ways of working. The team supports security architecture, access governance and operational security across a global SAP landscape serving business‑critical and GxP‑regulated processes.

Your closest partner is the SAP Security Architect, who you will agree priorities with and elevate design changes and unresolved risk to. You will also work with Basis, HANA database administrators, ABAP developers, business application teams, cybersecurity/SOC, functional teams, key users and external service providers. Clear ownership and open, timely communication keep findings and role changes moving, so risk is reduced faster.

What you can expect here

You will be trusted to own your work, with clear expectations and the support to perform at your best. You will build new skills across SAP security, access governance and monitoring, and see your contribution in measurable risk reduction across a global landscape. Your voice counts: you will be encouraged to share your expertise and challenge how things are done, then commit and move forward together.

Work Mode: Hybrid (3 days)

Application Deadline- 25 November 2026

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.