Platform Engineer, SAP Security

Job description

Job Description Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You work with the information security team as a competent and experienced information security and compliance specialist. How you will contribute This role will be responsible for the design, engineering, governance, and continuous optimization of SAP security and access controls, with a strong focus on S/4HANA role architecture, business process alignment, automation, SAP GRC, Segregation of Duties (SoD), vulnerability management, compliance, and integration with enterprise IAM capabilities. The ideal candidate combines deep SAP Security and S/4HANA technical expertise with a strong understanding of business processes, internal controls, IAM, and large-scale transformation programs. This person will partner closely with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders to build secure and sustainable solutions. What you will bring SAP S/4HANA Security & Transformation Lead and execute SAP Security activities supporting S/4HANA transformation and modernization initiatives. Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment. Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects. Translate business process requirements into secure and appropriately segregated SAP access models. Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements. Support SAP cutover, migration, testing, UAT, and go-live security activities. Role Engineering & Access Controls Design and engineer SAP roles based on least privilege, business need, and risk-based access principles. Perform role analysis, remediation, rationalization, and optimization across existing SAP environments. Establish and maintain role design standards, naming conventions, ownership models, and approval processes. Identify and eliminate excessive, conflicting, dormant, and unnecessary access. Design controls for privileged and sensitive SAP access, including emergency/firefighter access. Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes. Act as a security SME during business process transformation and operating-model changes. Support SAP license-rightsizing initiatives while maintaining required security and business functionality. SAP GRC & SoD Configure, administer, and optimize SAP GRC Access Control capabilities, including: Access Risk Analysis Business Role Management Access Request Management Emergency Access Management SoD and critical-access analysis Perform SoD risk analysis during role design, remediation, provisioning, and business transformation. Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls. Support periodic access reviews and certification activities. SAP Security Operations Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation. Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams. Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations. Automation & Continuous Improvement : Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support. Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security monitoring, while maintaining appropriate human oversight and control validation. Partner with SAP and enterprise AI teams to ensure AI-enabled SAP capabilities follow security, privacy, authorization, and governance requirements. Compliance & Controls Ensure SAP security controls meet applicable SOX, internal control, audit, regulatory, and corporate cybersecurity requirements. Provide evidence and support for internal and external audits. Design sustainable security controls that are embedded into SAP processes rather than dependent on manual intervention. Maintain security documentation, control procedures, risk assessments, and remediation plans. Required Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent experience. 8+ years of SAP Security experience, with significant hands-on experience in SAP S/4HANA. Strong experience designing and implementing SAP roles and authorization models. Demonstrated experience with S/4HANA transformation, role redesign, and security modernization. Experience working in a large, global, multi-operating-company environment. Demonstrated experience implementing AI based automation for operational efficiency. Strong analytical, problem-solving, and communication skills. Preferred Qualifications Experience with SAP Joule, SAP Business AI, or AI-enabled SAP security and automation capabilities. Understanding of AI security, authorization, data protection, and governance considerations within SAP environments. Experience with SAP Fiori security and embedded analytics. Experience with SAP Cloud / BTP security and hybrid SAP environments. Experience with SAP Identity Management or integration with IGA platforms such as SailPoint. Experience with SAP license optimization. Experience supporting large-scale global SAP transformations. Experience with security architecture, Zero Trust, and risk-based access models. Salary and Benefits: The base salary range for this position is $86,900 to $119,515; the exact salary depends on several factors such as experience, skills, education and location. In addition to base salary, this position is eligible for participation in a highly competitive bonus program with possibility for overachievement based on performance and company results. In addition, Mondelez International offers the following benefits: health insurance, wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education related programs, paid holidays and vacation time. Some of these benefits have eligibility requirements. Many of these benefits are subsidized or fully paid for by the company. No Relocation support available Business Unit Summary The United States is the largest market in the Mondelēz International family with a significant employee and manufacturing footprint. Here, we produce our well-loved household favorites to provide our consumers with the right snack, at the right moment, made the right way. We have corporate offices, sales, manufacturing and distribution locations throughout the U.S. to ensure our iconic brands—including Oreo and Chips Ahoy! cookies, Ritz, Wheat Thins and Triscuit crackers, and Swedish Fish and Sour Patch Kids confectionery products —are close at hand for our consumers across the country. Mondelēz Global LLC is an Equal Opportunity Employer/Protected Veterans/Persons with Disabilities. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected Veteran status, sexual orientation, gender identity, gender expression, genetic information, or any other characteristic protected by law. Applicants who require accommodation to participate in the job application process may contact 847-943-5460 for assistance. For more information about your Federal rights, please see eeopost.pdf ; EEO is the Law Poster Supplement ; Pay Transparency Nondiscrimination Provision ; Know Your Rights: Workplace Discrimination is Illegal Job Type Regular Information Security Technology & Digital