SAP Security Business Systems Consultant

About Abb Vie

Abb Vie (NYSE:

ABBV) is a global, research‑based biopharmaceutical company formed in 2013 following separation from Abbott. Abb Vie combines the focus and passion of a leading‑edge biotech with the expertise and capabilities of a long‑established pharmaceutical leader to develop and market advanced therapies that address some of the world’s most complex and serious diseases. Abb Vie employs approximately 25,000 people worldwide and markets medicines in more than 170 countries.

The SAP Security Business Systems Consultant is responsible for ensuring Abb Vie maintains a compliant and stable SAP security environment. The role is the SAP security and GRC control owner for all Abb Vie SAP SOX, and the primary point of contact for internal and external audit walkthroughs, questions or issues, ensuring audit requests are fulfilled. This position oversees day‑to‑day SAP Security processes, manages the managed service provider to ensure incidents and service requests are processed within the service level agreement, generates new security and GRC design proposals, and leads efforts to investigate, identify, and implement state‑of‑the‑art technology platforms that drive efficiency and security gains across multiple business areas.

Responsibilities also include evaluating alternatives to satisfy business security objectives, estimating and planning security and GRC projects, and overseeing onshore and offshore SAP security/GRC analysts.

• Lead, participate or coordinate end‑to‑end execution of SAP security & GRC solutions, related projects, and technology implementations. Introduce best practice and process improvement ideas.
• Act as the SAP security and GRC control owner for all Abb Vie SAP SOX. Monitor day‑to‑day security incidents and tasks to ensure high customer satisfaction and that the vendor meets all service levels.
• Review and approve security or GRC changes implemented by the team of security analysts to ensure alignment to security standards and global templates.
• Identify, monitor, and implement SAP ABAP system and HANA database hardening standards. Work with cybersecurity principles & controls and apply them to SAP environments.
• Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, SOX compliance, data security, and the software development lifecycle.
• Manage SAP system life‑cycle (SLC) processes, documentation (in Solution Manager), testing (Quality Center), and ticketing (Service Now).
• Lead SAP projects and teams; possess working knowledge of all aspects of the SAP ASAP methodology (Applications, Integration, Data, Security, Change Management, Training, and Communications).

• Bachelor’s Degree with 6 years’ experience;
  Master’s Degree with 5 years’ experience;
  PhD with 0 years’ experience.
• Extensive SAP security & GRC knowledge across multiple SAP technologies including GRC
  12, S/4
  
  HANA, SRM, BW, HANA Database 2.0, Fiori, SAC, EWM, GTS, Nakisa, Solution Manager, among others.
• Detailed design, implementation, and operational experience with SAP technical components such as SAP Single Sign‑on and the SAP GUI client.
• Understanding of core business processes and key security controls; experience with SOX compliance requirements, Segregation of Duties, and other controls principles.
• Knowledge of applicable regulations and standards affecting Pharmaceutical Products (e.g., GMP).
• Ability to resolve complex issues in high stress and high‑pressure situations.
• Critical thinking skills.
• Experience working in the pharmaceutical industry.
• Willingness and ability to travel globally.

• Builds strong relationships with peers and cross‑functionally with partners outside of the team to enable higher performance.
• Learns fast, grasps the essence, and can change course quickly where indicated.
• Raises the bar and is never satisfied with the status quo.
• Creates a learning environment, open to suggestions and experimentation for improvement.
• Embraces ideas of others, nurtures innovation, and manages innovation to reality.

• The compensation range…