Security and Compliance Expert, ERP Data Platform

F. Hoffmann-La Roche Gruppe; Warszawa; On-site; PLN 14,000 - 26,000; Full time

Benefits offered by this job

Annual bonus

Training budget

Private healthcare

Recharge Fridays

Flex Location

Vacation subsidy

Stock share purchase option

Job summary

F. Hoffmann-La Roche Gruppe in Warsaw is seeking a dedicated Security and Compliance Expert to focus on SAP ERP systems and data integrity. The role requires a Bachelor’s degree and at least 5 years of experience in IT security and compliance.

This position involves implementing security standards, ensuring regulatory compliance, and leading audits to protect data integrity. Additional perks include a competitive salary, training budget, and a flexible work environment.

Qualifications

• Minimum of 5 years’ post-secondary experience in SAP Security and Compliance.
• Proven track record as a Subject Matter Expert (SME) for ICFR and GxP.
• Experience with Risk Management and Data Privacy requirements.

Responsibilities

• Implement security standards for SAP platforms and maintain compliance.
• Monitor relevant regulations to ensure global compliance requirements.
• Lead audits and define control activities for auditor documentation.

Skills

IT security/authorization and compliance

SAP Security

Data Governance principles

Analytical skills

Collaboration with diverse teams

Education

Bachelor’s Degree in Computer Science, IT, or Engineering

Tools

SAP BW

HANA Studio

SAP Datasphere

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Security and Compliance Expert, ERP Data Platform

Are you passionate about Information Security and Compliance, specifically in ERP environments with a focus on data integrity and governance? Join a global team where you'll lead the change as a Security and Compliance expert in optimizing processes through experience and automation.

The Mission

Your primary mission is to ensure that the organization's technology landscape, data practices, and security measures do not expose the business to legal penalties, financial loss, or reputational damage. As a recognized expert, you will implement and maintain security, authorization, and compliance standards for SAP ERP platform systems and data products, providing leadership across both on-premise and cloud SAP Data platform ecosystems.

The Opportunity

• Platform Security: Implement and maintain security, authorization, and compliance standards for SAP platforms (SAP BW 7.5 HANA, SAP BW4HANA, and SAP Datasphere). Develop and mature capabilities in cloud compliance and security, particularly within SAP Datasphere.
• Regulatory Alignment & Framework Management: Continuously monitor relevant regulations (e.g., GDPR, CCPA, HIPAA, SOX) and industry standards (e.g., ISO 27001, SOC 2, NIST) to ensure the platform remains ahead of global compliance requirements.
• Policy Development & Data Governance: Drive the creation and refinement of internal policies and data governance frameworks to maintain high standards of integrity, security, and structured data handling.
• ICFR & Control Ownership: Act as the System Owner Deputy and Control Owner, taking accountability for the end-to-end ICFR lifecycle, GxP controls, and other relevant regulations.
• Monitoring & Remediation: Lead weekly and monthly monitoring of SoD conflicts via GRC dashboards, work with SoD Champions to mitigate risks, and address non-compliant items flagged in the SAP Security Standards Roche documentation.
• System Integrity: Oversee application error reviews (e.g., failed jobs) and sign off on monitoring results in tools like ICAt to provide evidence for control checks.
• Access Governance: Perform quarterly reviews of Critical access, GRC FireFighter roles (Controllers, Owners, Admins), and HANA DB users, initiating timely removals to maintain a "least privilege" environment.
• Audit Leadership: Lead ICFR IT audit support by defining control activities, approving auditor documentation, and acting as the primary point of contact for auditors during peak cycles.
• Strategic Direction: Set technological development directions by analyzing and implementing new solutions, tools, and IT standards, with a focus on data governance, validation, and automation.
• Risk Assessment: Annually review and update the System Risk Assessment (SRA) and Data Classification to ensure alignment with the Minimum Security Baseline.
• Process Optimization: Actively conduct innovation projects to optimize processes, introduce new solutions, and increase efficiency through automation in Data products.
• Collaboration: Partner with system teams and stakeholders to ensure task ownership, bridge data privacy awareness gaps, and onboard/train new team members on ICFR control activities.

Who You Are

• Education & Experience: Bachelor’s Degree in Computer Science, IT, or Engineering with a minimum of 5 years’ post-secondary experience in SAP Security and a deep understanding of Compliance.
• Compliance Expert: Proven track record in IT security/authorization and compliance projects, specifically acting as a Subject Matter Expert (SME) for ICFR, GxP, and GRC environments.
• Technical Proficiency: Working knowledge of SAP BW, HANA Studio, SAP BI, and SAP Datasphere. Familiarity with new trends in SAP Analytics, authorizations and the AI space.
• Control Mastery: Strong understanding of SoDs, Critical access, Access Controls, and Pharmaceutical industry best practices including SAP audit guidelines.
• Data Governance: Experience with Data Products and Data Governance principles and practices.
• Risk Management: Experience in IT system validation processes and conducting System Risk Assessments (SRA), including Data Privacy requirements.
• Analytical Leader: Strong ability in root cause analysis, providing solutions to complex system processes, and driving remediation to completion.
• Operational Excellence: Ability to manage an external workforce/squad, adhering to dynamic targets and timelines in an Agile (SAFe/Scrum) environment.
• Communication: English proficiency with excellent interpersonal skills to collaborate effectively with diverse teams and lead training sessions for ICFR onboarding.
• Adaptability: Ability to quickly learn new technologies and compliance frameworks in a fast-paced, regulated global organization.

What you get

• Salary range 14,000 - 26,000 PLN gross based on the employment contract.
• Annual bonus payment based on your performance (target 15%).
• Dedicated training budget (training, certifications, conferences, diversified career paths).
• Recharge Fridays (2 Fridays off per quarter available).
• Take time Program (up to 3 months of leave to use for any purpose).
• Vacation subsidy available.
• Flex Location (possibility to perform your work from different places in the world for a certain period of time).
• Take Time for Charity (additional paid leave of maximum 2 weeks).
• Private healthcare (LuxMed packages), group life insurance (UNUM) and Multisport.
• Stock share purchase additions.
• Yearly sales of company laptops and cars and many more!

Compensation & Benefits

The expected salary range for this position, based on the primary location of Warsaw Grafit is 170,100.00 PLN-315,900.00 PLN. Final compensation will be determined by a number of factors, including your skills, experience, qualifications, and location. In addition to base pay, this role may be eligible for a discretionary annual bonus with a target of 15% subject to both individual and company performance. This position also offers an attractive benefits package and additional benefits details are available.

Apply directly and join us in shaping the future of healthcare.

Roche is an Equal Opportunity Employer.