Senior SAP Security & Identity Management

Novartis Corporation (M) Sdn Bhd; Selangor; On-site; MYR 80,000 - 120,000; Full time

Job summary

A global healthcare leader in Selangor is seeking an expert in security management to oversee global access operations and compliance processes. The role requires extensive experience in SAP security and identity management, with proven track records in project implementation and audit control. Candidates should have strong skills in identity lifecycle management and be proficient in managing vendor services to meet security standards. This position offers the opportunity to drive continuous improvement initiatives and support audit facilitation.

Qualifications

• Extensive experience in SAP / Application Security and Identity Management.
• Proven track records with more than 3 end-to-end project experiences in SAP S&A implementation.
• Experience in audit and control design.
• Experience in managing vendor services and ensuring alignment with security standards.

Responsibilities

• Manage global access management processes and ensure compliance.
• Implement continuous improvement initiatives related to security.
• Support audit facilitation and governance.
• Act as a subject matter expert for security enhancements.

Skills

SAP Security & Authorization design

Analytical & problem-solving

Project management

Identity lifecycle management

Audit and control of Identity access management

Tools

SAP GRC

S4/HANA

SAP BTP

SAP SaaS

Job description

Responsibilities

• Responsible for global access management/ operation, ensure process are effectively operated and in compliance manner.
• Responsible for the overall continuous improvement, security control implementation, life cycle of security document and training.
• Responsible for audit facing and support include walkthrough, collection of evidence and governance of audit deliverable and resolve if any audit issues.
• Serve as the subject matter expert (SME) for security enhancement, providing expert advice and guidance to business and compliance stakeholder.
• Advises peers and management on complex issues, provides complex, contextual advice to influence the management for any new implementation and risk across business domains.
• Support vendor service performance, ensuring quality standards are met.

Key Performance Indicators

• Ensure adherence of operation / vendor are meeting the control objective and agreed SLA/KPI.
• Ensure appropriateness of implementation of security control and ensure no gap in the design and operation.
• Ensure improvement/ enhancement initiative are implemented on time.
• Ensure regular successful audit related to user access management and all gaps are addressed on time.

Work Experience

• Extensive experience in SAP / Application Security and Identity Management.
• Proven track records, preferable with more than 3 end-to-end project experiences in SAP S&A implementation and support large scale of global operation.
• Experience in audit and control design.
• Experience in managing vendor services and ensuring alignment with security standards
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with risk / governance management and CISA/ CISM certification is a strong plus.

Skills

• Excellent level of functional and technical knowledge of SAP security & authorization.
• Excellent level of audit and control of Identity access management.
• Strong knowledge in identity lifecycle management concept including role design, RBAC, SoD, Least Privilege principle and good understanding on IAM IT general controls/regulatory compliance requirements
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with other identity lifecycle management products is a strong plus.
• Possess great analytical and consulting skills to provide recommendations and solutions for user access design gaps and remediation

Skills (summary)

• SAP Security & Authorization design
• Analytical & problem-solving
• Project management

Languages

• Languages :