Senior SAP Security & Identity Management

Novartis; Selangor; On-site; MYR 120,000 - 150,000; Full time

Job summary

A global pharmaceutical company is seeking a Senior SAP Security & Identity Management professional in Malaysia, Selangor. Responsibilities include global access management, security enhancement, and vendor service performance. Candidates should have extensive experience in SAP security and identity management, with proven project delivery and strong analytical skills. This role offers an opportunity to ensure compliance and lead security improvement initiatives within a dynamic environment.

Qualifications

• Extensive experience in SAP/Application Security and Identity Management.
• Proven track records with more than 3 end-to-end project experiences in SAP S&A.
• Experience in managing vendor services and ensuring alignment with security standards.

Responsibilities

• Responsible for global access management and compliance.
• Ensure implementation and operational security controls.
• Support audits including evidence collection and governance.

Skills

SAP security & authorization

Identity access management audit

Identity lifecycle management

Analytical skills

Tools

SAP GRC

S4/HANA

ECC

SAP BTP

HANA/BW/BO

Job description

Senior SAP Security & Identity Management

• Responsible for global access management/ operation, ensure process are effectively operated and in compliance manner.
• Responsible for the overall continuous improvement, security control implementation, life cycle of security document and training.
• Responsible for audit facing and support include walkthrough, collection of evidence and governance of audit deliverable and resolve if any audit issues.
• Serve as the subject matter expert (SME) for security enhancement, providing expert advice and guidance to business and compliance stakeholder.
• Advises peers and management on complex issues, provides complex, contextual advice to influence the management for any new implementation and risk across business domains.
• Support vendor service performance, ensuring quality standards are met.

Key performance indicators:

• Ensure adherence of operation / vendor are meeting the control objective and agreed SLA/KPI.
• Ensure appropriateness of implementation of security control and ensure no gap in the design and operation.
• Ensure improvement/ enhancement initiative are implemented on time.
• Ensure regular successful audit related to user access management and all gaps are addressed on time.

Work Experience:

• Extensive experience in SAP / Application Security and Identity Management.
• Proven track records, preferable with more than 3 end-to-end project experiences in SAP S&A implementation and support large scale of global operation.
• Experience in audit and control design.
• Experience in managing vendor services and ensuring alignment with security standards
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with risk / governance management and CISA/ CISM certification is a strong plus.

Skills:

• Excellent level of functional and technical knowledge of SAP security & authorization.
• Excellent level of audit and control of Identity access management.
• Strong knowledge in identity lifecycle management concept including role design, RBAC, SoD, Least Privilege principle and good understanding on IAM IT general controls/regulatory compliance requirements
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with other identity lifecycle management products is a strong plus.
• Possess great analytical and consulting skills to provide recommendations and solutions for user access design gaps and remediation