ERP Security & Compliance Lead — SAP Data Platform

Roche; Województwo wielkopolskie; Hybrid; PLN 14,000 - 26,000; Full time

Benefits offered by this job

Annual bonus 15%

Private healthcare

Training budget

Flex Location

Take Time for Charity

Job summary

Roche is seeking a Security and Compliance Expert for the ERP Data Platform. You will implement and lead security, authorization, and governance across SAP BW/HANA/SAP Datasphere, with a focus on data integrity and regulatory alignment.

The role combines on-premise and cloud responsibilities in a global environment. You will drive policy development, risk mitigation, and ICFR control activities while collaborating with cross-functional teams in a hybrid work model requiring in-office presence

Qualifications

• Bachelor’s degree in Computer Science, IT, or Engineering with SAP Security and Compliance experience.
• Proven track record in IT security/authorization and compliance projects (ICFR, GxP, GRC).
• Strong knowledge of SAP platforms and data governance concepts.

Responsibilities

• Implement and maintain security, authorization, and compliance standards for SAP platforms.
• Monitor GDPR, ISO 27001, SOC 2, and other standards to ensure global compliance.
• Drive data governance frameworks and policy development for SAP data products.
• Lead ICFR lifecycle and audit support across SAP on-premise and cloud environments.
• Oversee SoD risk remediation, access governance, and quarterly reviews.

Skills

IT security expertise

Compliance leadership

Analytical leadership

Communication

Education

Bachelor’s Degree in Computer Science, IT, or Engineering

Tools

SAP BW

HANA Studio

SAP BI

SAP Datasphere

Job description

Roche is seeking a Security and Compliance Expert for the ERP Data Platform. You will implement and lead security, authorization, and governance across SAP BW/HANA/SAP Datasphere, with a focus on data integrity and regulatory alignment.

The role combines on-premise and cloud responsibilities in a global environment. You will drive policy development, risk mitigation, and ICFR control activities while collaborating with cross-functional teams in a hybrid work model requiring in-office presence