Job Description Summary
This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance.
The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.
Job Description
Global Head SAP SIAM
Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!
Job Summary
This role is accountable for defining and delivering the global SAP security, identity and authorisation strategy, ensuring that access to SAP systems, data and privileged capabilities is appropriately designed, governed, monitored and controlled. The Global Lead SAP Security, Identity & Authorisation Management owns the enterprise SAP security framework across BAU, transformation, separation and M&A activities, including role design, segregation of duties, privileged access, authentication, access lifecycle controls and security assurance.
The role provides strategic leadership and a single point of accountability for SAP application security. It embeds security-by-design into S/4HANA and platform transformation, aligns SAP controls with enterprise cybersecurity and ISRC requirements, strengthens audit readiness, reduces access and compliance risk, and establishes reusable global security standards while retaining critical decision-making capability within Sandoz.
Your Key Responsibilities
Your responsibilities include, but are not limited to:
Major accountabilities:
Security Strategy, Roadmap and Business Value
- Define and continuously evolve the global SAP security, identity and authorization strategy, target architecture and multi-year roadmap.
- Align security priorities with enterprise cybersecurity direction, SAP CoE objectives, regulatory expectations and business transformation needs.
- Provide executive-level visibility of security posture, material risks, remediation progress, control effectiveness and investment priorities.
Identity, Role Design and Access Governance
- Own global SAP role-design principles, authorization standards and governance for business, technical and privileged access.
- Establish consistent joiner, mover and leaver controls, request and approval workflows, access recertification and timely deprovisioning expectations.
- Govern segregation-of-duties rules, mitigating controls, emergency access and privileged access management across SAP environments.
Security Architecture and Transformation Enablement
- Embed security-by-design into S/4HANA, SAP BTP, cloud, integration, data, M&A and separation initiatives from design through deployment.
- Approve security solution designs, patterns, exceptions and high-risk access decisions in alignment with enterprise architecture and security policies.
- Define reusable security patterns and transition approaches that enable scalable global templates and clean-core transformation.
Risk, Compliance and Audit Readiness
- Own SAP application-security risk identification, assessment, treatment and escalation, ensuring clear accountability and timely remediation.
- Maintain audit-ready controls and evidence for access governance, privileged access, role design, periodic reviews and security operations.
- Partner with Cybersecurity, Risk, Internal Controls, Audit, Privacy and business control owners to address findings and evolving requirements.
Operations, Monitoring and Incident Leadership
- Govern security operations, monitoring, vulnerability remediation and response for SAP application-security events and control failures.
- Define service levels, quality measures and escalation paths for provisioning, role maintenance, access reviews and security incidents.
- Drive automation and analytics that improve control effectiveness, transparency, user experience and operational efficiency.
Vendor, Financial and Capability Leadership
- Lead internal specialists and external partners, ensuring accountable delivery, strong quality controls, knowledge transfer and reduced key-person dependency.
- Own budget planning, forecasting, SOW and invoice governance, vendor performance and investment choices for the SAP security portfolio.
- Build a sustainable SAP security capability through coaching, standards, communities of practice and succession planning.
Minimum Requirements
What you’ll bring to the role:
- 15+ years of experience in SAP security, identity and authorization management, including leadership in complex global environments.
- Demonstrated expertise in SAP role design, authorizations, segregation of duties, privileged access, access governance and security controls
- Experience securing SAP S/4HANA or ECC, SAP BTP, cloud services, integrations and major transformation programs.
- Strong understanding of identity lifecycle management, least privilege, access certification, emergency access and security monitoring.
- Proven experience working with Cybersecurity, Risk, Internal Controls, Audit, Privacy and business stakeholders in regulated environments.
- Experience leading global teams, managed services, system integrators and multi-partner security delivery models.
- Ability to translate cyber and control risks into executive decisions, investment priorities and practical remediation plans.
- Proven budget, vendor, SOW, service-level and performance-management capability.
Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field; Master’s degree preferred.
- Relevant SAP security, identity, GRC, cybersecurity or audit certifications strongly preferred.
Why Sandoz?
Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more!
With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.
Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported!
Join us!
#Sandoz
Skills Desired
Agile Project Management, Business Partnering, Change Management, IT Service Delivery, Performance Management, Talent Development
