ERP Security & Compliance Lead, SAP Data Platform

Roche; Poznań; Hybrid; PLN 156,000 - 290,000; Full time

Benefits offered by this job

Annual bonus (15%)

Training budget

Flex Location

Private healthcare

Stock purchase plan

Vacation subsidy

Take Time for Charity

Job summary

Roche Polska Sp. z o.o. is seeking a Security and Compliance Expert for the ERP Data Platform.

You will lead SAP security, data governance, and compliance across on-premise and cloud environments, ensuring SoD controls, ICFR and GxP alignment. The role blends hands-on delivery with strategic risk oversight in a global healthcare setting. This hybrid position requires in-office presence two days per week in Poznań, with a strong focus on GDPR, ISO 27001, and regulatory frameworks.

Qualifications

• Bachelor’s degree in Computer Science, IT, or Engineering with 5+ years in SAP Security.
• Proven track record in IT security, authorization and compliance projects.
• Experience with SAP BW, HANA Studio, SAP BI, and SAP Datasphere.

Responsibilities

• Implement and maintain security, authorization, and compliance standards for SAP ERP systems.
• Monitor regulations (GDPR, SOX, ISO 27001) and ensure compliance.
• Lead ICFR lifecycle and GxP controls for ERP and data products.
• Oversee access governance and SoD remediation.
• Collaborate with cross-functional teams to improve data governance.

Skills

SAP Security

Data Governance

Compliance Projects

GRC & ICFR

SoD & Access Controls

Education

Bachelor’s Degree in Computer Science / IT / Engineering

Tools

SAP BW

HANA Studio

SAP BI

SAP Datasphere

Job description

Roche Polska Sp. z o.o. is seeking a Security and Compliance Expert for the ERP Data Platform.

You will lead SAP security, data governance, and compliance across on-premise and cloud environments, ensuring SoD controls, ICFR and GxP alignment. The role blends hands-on delivery with strategic risk oversight in a global healthcare setting. This hybrid position requires in-office presence two days per week in Poznań, with a strong focus on GDPR, ISO 27001, and regulatory frameworks.