Senior Platform Manager, SAP Security

Information Security And Compliance Leader

Are you ready to make it happen at Mondelēz International? Join our mission to lead the future of snacking. Make it uniquely yours.

You work with the information security team as a competent and experienced information security and compliance leader.

How you will contribute

You will assess information security risks in line with internal policies and external best practices and determine requirements how to secure Mondelēz International information and IT assets. In addition, you will develop security standards and policies; advise technical teams when developing relevant procedures or have operational security questions; review and consulting them on compliant and effective use of common tools. You will also keep business stakeholders apprised on the overall security and compliance roadmap, provide training on information security to appropriate teams, and develop security strategies, architectures and roadmaps across process and technologies.

What you will bring

A desire to drive your future and accelerate your career. You will bring experience and knowledge in:

• Information security, compliance and risk management
• Understanding security solutions and their applicability to Mondelēz International
• Developing security strategies, awareness campaigns, policies/standards, and governance
• Communicating effectively with technical specialists, leaders and peers
• Commercially astute
• Leadership and people management skills

More about this role

SAP Security Sr. Platform Manager is responsible to provide strategic and operational leadership across SAP Security and GRC functions, ensuring a secure, compliant, and well-governed technical landscape spanning S/4

HANA, BTP, Fiori, and all integrated systems within the RISE with SAP ECC environment. This SME manages a team responsible for role design, access controls, compliance, and audit readiness across all SAP S/4

HANA and integrated systems, driving role design initiatives for both greenfield and brownfield implementations while ensuring our GRC posture remains robust and audit-ready at all times.

They partner closely with SAP Functional teams, business process owners, Audit, Info Sec, Systems Integrators, and third-party technology providers to ensure secure, compliant, and scalable SAP operations. They serve as the bridge between IT Security, Internal Controls, and Internal Audit, translating technical security configurations into the language of risk, compliance, and business assurance. This is not a purely technical role. While deep hands-on SAP security expertise is essential, the ideal candidate will bring executive presence, cross-functional influence, and the ability to lead teams through complex transformation programs while maintaining a strong control environment.

Role Details:

Security Design, Architecture & Role Governance

• Own the SAP role design standard, including role catalog governance, the authorization concept, segregation of duties (SoD) frameworks, mitigation controls, and access request workflows, ensuring designs are clean core aligned and sustainable across the program lifecycle. This encompasses the complete spectrum of security design across S/4
  
  HANA, EWM, Fiori, BW, ECC, BTP, and other integrated platforms: building scalable role architectures, defining and configuring authorization objects at a granular level, and establishing user access controls that are both operationally practical and compliant with enterprise policy.
• Lead security work streams in both greenfield and brownfield S/4
  
  HANA programs. Should be comfortable operating across all project phases, from blueprint and design workshops through build, testing, cutover, and hypercare and be able to make pragmatic decisions that keep transformation timelines on track without compromising security integrity.

GRC Configuration, Management & Segregation of Duties

• Own full accountability for leading SAP GRC platform operations covering Access Control (AEM, ARM, BRM, EAM), Firefighter and Emergency Access Management processes, periodic access reviews, SoD conflict analysis, and continuous controls monitoring, maintaining audit-ready posture at all times.

Audi…