Platform Engineer, SAP Security
Job in
Chicago, Cook County, Illinois, 60684, USA
Listed on 2026-09-07
Listing for:
Mondelez International
Full Time
position Listed on 2026-09-07
Job specializations:
-
IT/Tech
Cybersecurity, SAP Consultant, Information Security & Data Protection
Job Description & How to Apply Below
Global Headquarters - Chicago, USA
Full time
R-174529
** Job Description*
* ** Are You Ready to Make It Happen at Mondelēz International?*
* ** Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.*
* You work with the information security team as a competent and experienced information security and compliance specialist.
** How you will contribute*
* This role will be responsible for the design, engineering, governance, and continuous optimization of SAP security and access controls, with a strong focus on S/4
HANA role architecture, business process alignment, automation, SAP GRC, Segregation of Duties (SoD), vulnerability management, compliance, and integration with enterprise IAM capabilities.
The ideal candidate combines deep SAP Security and S/4
HANA technical expertise with a strong understanding of business processes, internal controls, IAM, and large-scale transformation programs. This person will partner closely with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders to build secure and sustainable solutions.
** What you will bring*
* ** SAP S/4
HANA Security & Transformation*
* + Lead and execute SAP Security activities supporting S/4
HANA transformation and modernization initiatives.
+ Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment.
+ Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects.
+ Translate business process requirements into secure and appropriately segregated SAP access models.
+ Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements.
+ Support SAP cutover, migration, testing, UAT, and go-live security activities.
** Role Engineering & Access Controls*
* Design and engineer SAP roles based on least privilege, business need, and risk-based access principles.
+ Perform role analysis, remediation, rationalization, and optimization across existing SAP environments.
+ Establish and maintain role design standards, naming conventions, ownership models, and approval processes.
+ Identify and eliminate excessive, conflicting, dormant, and unnecessary access.
+ Design controls for privileged and sensitive SAP access, including emergency/firefighter access.
+ Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes.
+ Act as a security SME during business process transformation and operating-model changes.
+ Support SAP license-rightsizing initiatives while maintaining required security and business functionality.
** SAP GRC & SoD*
* + Configure, administer, and optimize SAP GRC Access Control capabilities, including:
+ Access Risk Analysis
+ Business Role Management
+ Access Request Management
+ Emergency Access Management
+ SoD and critical-access analysis
+ Perform SoD risk analysis during role design, remediation, provisioning, and business transformation.
+ Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls.
+ Support periodic access reviews and certification activities.
** SAP Security Operations*
* + Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation.
+ Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams.
+ Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations.
** Automation & Continuous Improvement** :
+ Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support.
+ Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security monitoring, while maintaining…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×