Platform Engineer, SAP Security

Job Description

Are You Ready to Make It Happen at Mondelēz International?

Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

You work with the information security team as a competent and experienced information security and compliance specialist.

This role will be responsible for the design, engineering, governance, and continuous optimization of SAP security and access controls, with a strong focus on S/4

HANA role architecture, business process alignment, automation, SAP GRC, Segregation of Duties (SoD), vulnerability management, compliance, and integration with enterprise IAM capabilities.

The ideal candidate combines deep SAP Security and S/4

HANA technical expertise with a strong understanding of business processes, internal controls, IAM, and large-scale transformation programs. This person will partner closely with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders to build secure and sustainable solutions.

• Lead and execute SAP Security activities supporting S/4
  
  HANA transformation and modernization initiatives.
• Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment.
• Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects.
• Translate business process requirements into secure and appropriately segregated SAP access models.
• Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements.
• Support SAP cutover, migration, testing, UAT, and go-live security activities.

Design and engineer SAP roles based on least privilege, business need, and risk-based access principles.

• Perform role analysis, remediation, rationalization, and optimization across existing SAP environments.
• Establish and maintain role design standards, naming conventions, ownership models, and approval processes.
• Identify and eliminate excessive, conflicting, dormant, and unnecessary access.
• Design controls for privileged and sensitive SAP access, including emergency/firefighter access.
• Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes.
• Act as a security SME during business process transformation and operating-model changes.
• Support SAP license-rightsizing initiatives while maintaining required security and business functionality.

• Configure, administer, and optimize SAP GRC Access Control capabilities, including:
• Access Risk Analysis
• Business Role Management
• Access Request Management
• Emergency Access Management
• SoD and critical-access analysis
• Perform SoD risk analysis during role design, remediation, provisioning, and business transformation.
• Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls.
• Support periodic access reviews and certification activities.

• Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation.
• Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams.
• Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations.

• Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support.
• Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security monitoring, while maintaining appropriate human oversight and control validation.
• Partner with SAP and enterprise AI teams to ensure AI-enabled SAP capabilities follow security, privacy, authorization, and governance requirements.

• Ensure SAP security controls meet applicable SOX, internal control, audit, regulatory, and corporate cybersecurity requirements.
• Provide evidence and support for internal and external audits.
• Design sustainable security controls that are embedded into SAP processes rather than dependent on manual…