SAP Access Management Lead

Position Title: SAP Access Management Lead

Location: Wimbledon (Hybrid)

Reports to: ERP Platform Lead

Together, WE enable individuals to look, feel, and be their true selves.

Wella Company is one of the world’s leading beauty companies, comprised of a family of iconic brands such as Wella Professionals, Clairol, OPI, Nioxin and ghd. With 6,000 employees globally, presence in over 100 countries, Wella Company and its brands enable consumers to look, feel, and be their true selves. As innovators in the hair and nail industry, Wella Company empowers its people to delight consumers, inspire beauty professionals, engage communities, and deliver sustainable growth to its stakeholders.

For additional information about the Wella Company please visit  .

The SAP Access Management & Governance Lead is accountable for defining, governing, and continuously improving SAP access management, security governance, and compliance across Wella's global SAP landscape.

This role owns the end-to-end operating model for SAP access management, ensuring that the right individuals have the right access at the right time while maintaining compliance with regulatory and audit requirements. The role is responsible for Segregation of Duties (SoD), access governance, approval workflows, role ownership, audit readiness, risk management, and the overall maturity of SAP security processes.

Working closely with Business Owners, Internal Audit, Cybersecurity, Enterprise Architecture, SAP Basis, and strategic service partners, the SAP Access Management & Governance Lead will establish sustainable governance processes, drive security transformation initiatives, and ensure Wella maintains a secure, scalable, and audit-ready SAP environment.

The role combines strategic leadership, governance ownership, and operational oversight and will play a key role in shaping the future SAP security and identity governance landscape at Wella.

• Governance & Strategy
• Define and own Wella's SAP Access Management operating model.
• Establish and govern SAP access management policies, standards, and controls.
• Drive the long-term SAP access governance strategy and roadmap.
• Act as the design authority for SAP access governance during major transformation programmes and SAP implementations.
• Define ownership models for SAP roles, business processes, mitigating controls, and approval authorities.
• Govern access management across Wella's SAP ecosystem including ECC, S/4
  
  HANA, SAP BTP, Datasphere, SAC, Ariba, Success Factors, Concur, Emarsys, and future SAP platforms.
• Segregation of Duties (SoD) & Risk Management
• Own and maintain the global SAP SoD framework.
• Define governance processes for identifying, approving, mitigating, and monitoring access risks.
• Partner with business stakeholders to ensure risk acceptance and mitigation processes are effective and documented.
• Perform regular risk assessments of SAP roles and access models.
• Drive reduction of access risks and toxic combinations across the SAP landscape.
• Oversee management of privileged and emergency access, including Firefighter access controls and reviews.
• Audit, Compliance & Controls
• Own SAP access-related controls supporting SOX, GDPR, ISO
  27001 and other regulatory requirements.
• Act as the primary point of contact for internal and external auditors.
• Lead remediation of audit findings and compliance gaps.
• Establish sustainable, audit-ready processes and evidence repositories.
• Ensure audit evidence can be produced efficiently and consistently.
• Monitor control effectiveness and drive continuous improvement activities.
• Prevent repeat audit findings through robust governance and process enhancement.
• Access Request Management & Provisioning
• Own the design and governance of SAP access request and approval processes.
• Define approval authorities, role ownership responsibilities, and escalation paths.
• Ensure end-to-end traceability and auditability of all access requests.
• Govern Joiner, Mover, Leaver (JML) processes across SAP applications.
• Oversee provisioning and de-provisioning activities delivered by support partners.
• Drive automation and simplification of access management processes through workflow and identity governance tools.
• Ensure timely and accurate access provisioning aligned with agreed service levels.
• Access Certifications & Role Management
• Own periodic user access reviews and certifications.
• Ensure role reviews are performed regularly by designated business owners.
• Establish governance around role design, naming standards, documentation, and approval processes.
• Reduce role complexity and promote role standardisation across SAP systems.
• Ensure clear ownership exists for all SAP roles and access profiles.
• Vendor Governance & Service Management
• Act as service owner for third-party SAP access management and security services.
• Govern managed service providers, ensuring delivery against SLAs, KPIs, compliance obligations, and contractual commitments.
• Drive continuous service improvements with strategic…