Job Title: Platform Security Manager – Key Initiatives
Work Level: 2A
Location: Bangalore
ABOUT UNILEVER
With 3.4 billion people in over 190 countries using our products every day, Unilever is a business that makes a real impact on the world. Work on brands that are loved and improve the lives of our consumers and the communities around us. We are driven by our purpose: to make sustainable living commonplace, and it is our belief that doing business the right way drives superior performance. At the heart of what we do is our people – we believe that when our people work with purpose, we will create a better business and a better world.
At Unilever, your career will be a unique journey, grounded in our inclusive, collaborative, and flexible working environment. We don’t believe in the ‘one size fits all’ approach and instead we will equip you with the tools you need to shape your own future.
ABOUT GDT:
GDT is the global digital and technology engine of Unilever offering business services, technology, and enterprise solutions. GDT serves over 190 locations and through a network of specialized service lines and partners delivers insights and innovations, user experiences and end-to-end seamless delivery making Unilever Purpose Led and Future Fit.
Business Context and Purpose
Technology Foundations is delivering transformation through Project Diamond and other strategic SAP/ERP initiatives. The Platform Security Initiatives Manager will lead Cyber engagement across these programmes and other priority initiatives, while supporting selected BAU activities needed to sustain SAP and Cloud platform security and manage material risk.
The role will embed security into design, build, migration and transition to operations, working closely with CPS, SAP and ERP teams, program workstreams, Cyber teams, service owners and delivery partners.
Role Summary
The role will translate Cyber standards into practical program requirements, coordinate security assurance, drive risk reduction and remediation actions, and report progress through programme and platform governance. It will also support applicable BAU risk governance and assurance in associated areas primarily SAP and Cloud
Key Accountabilities - Transformation
· Support Sap, OneERP and CPS teams in delivering the Cyber requirements for Diamond and in securing the new GCP environment
· Ensuring that new strategic initiatives in SAP/ERP are delivered as per applicable Cyber Controls
· Build risk-based assurance plans aligned to programme design, build, migration and go-live milestones.
· Embed Cyber requirements into architectures, HLDs/LLDs, migration plans and acceptance criteria.
· Partner with CPS on secure GCP foundations, including Landing Zone guardrails, IaC patterns, golden images, identity, networking, logging and workload protection.
· Partner Platform teams in embedding security for SAP and ERP transformation, covering applicable controls across access, segmentation, encryption, secure development, vulnerability management, logging and resilience.
· Maintain visibility of program risks, KEVs, control gaps, dependencies and remediation progress; escalate material blockers and decisions.
Applicable BAU Accountabilities
· Support risk-posture governance for assigned platforms, including cyber KPIs, vulnerabilities, control compliance and remediation tracking.
· Review material control gaps and risk acceptances, ensuring clear ownership, treatment and approval.
· Advise platform teams on Cyber standards and controls, particularly where programme designs transition into standard services.
· Support risk-based design reviews, assurance activities, audit remediation and critical post-incident actions.
· Drive continuous improvement through security roadmaps, automation and reduction of repeat findings.
Key Skills and Experience
· 10-12 years of experience in Cyber Security, Cloud or SAP security, security architecture, technology risk or security program delivery.
· Experience embedding security into large cloud, SAP/ERP, platform-modernisation or migration programmes.
· Strong understanding of GCP security, IAM, networking, logging, encryption, vulnerability management and workload protection.
· Working knowledge of SAP landscapes and security risks associated with SAP S/4HANA or ERP transformation.
· Ability to translate internal Cyber standards into implementable requirements.
· Strong risk judgement, stakeholder influence, governance reporting and delivery tracking.
· Relevant certification such as CCSP, CISSP, CISM or Google Professional Cloud Security Engineer is desirable.
· Ability to manage conflicting priorities and multiple tasks.
· Stakeholder management and interpersonal skills at both a technical and non-technical level.
Key Interfaces
Diamond and strategic initiatives in SAP/ERP programme teams; CPS; SAP and ERP teams; Technology Foundation service owners; Enterprise and Security Architecture; Proactive Security; Security Engineering; GRAC; CTI; GSOC, CSA; and relevant delivery partners.
LEADERSHIP SKILLS
“Our commitment to Equality, Diversity & Inclusion”
Unilever embraces diversity and encourages applicants from all walks of life! This means giving full and fair consideration to all applicants and continuing development of all employees regardless of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage and civil partnership, and pregnancy and maternity.
Note: "All official offers from Unilever are issued only via our Applicant Tracking System (ATS). Offers from individuals or unofficial sources may be fraudulent—please verify before proceeding."
Want to know if this job is worth applying to?
Bengaluru, Karnataka, India
Onsite