Global Senior Solution Engineer: SAP GRC

Job Description Summary The SAP GRC SME is accountable for the end-to-end ownership, governance, and continuous improvement of SAP Roles, Authorizations, and Governance, Risk & Compliance (GRC) processes across the enterprise SAP landscape. The role serves as the functional and technical authority for SAP access governance, ensuring regulatory compliance, segregation of duties (SoD) integrity, and risk-based access controls that support business operations and digital transformation initiatives. Job Description Global Senior Solution Engineer: SAP GRC Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape! Job Summary The SAP GRC SME is accountable for the end-to-end ownership, governance, and continuous improvement of SAP Roles, Authorizations, and Governance, Risk & Compliance (GRC) processes across the enterprise SAP landscape. The role serves as the functional and technical authority for SAP access governance, ensuring regulatory compliance, segregation of duties (SoD) integrity, and risk-based access controls that support business operations and digital transformation initiatives.            Your Key Responsibilities Your responsibilities include, but are not limited to: Major accountabilities:  SAP Security & Authorization Ownership Own and govern the SAP role design, authorization concept, and access control framework across the enterprise SAP ecosystem. Serve as the primary Subject Matter Expert for SAP Security, Roles, Authorizations, and GRC solutions. Define and maintain role design standards, authorization governance policies, and access management procedures. Ensure role structures remain scalable, compliant, and aligned with evolving business processes. Lead periodic reviews and optimization of user access and security models. Governance, Risk & Compliance (GRC)Accountable for global SAP GRC governance, including Access Risk Analysis, Emergency Access Management, Access Request Management, and Role Management processes. Establish and maintain Segregation of Duties (SoD) controls and risk mitigation strategies. Ensure adherence to internal control frameworks, regulatory requirements, and pharmaceutical compliance standards. Lead remediation of audit findings and continuously enhance control effectiveness. Develop governance mechanisms to proactively identify and mitigate access-related risks. Compliance & Audit Management Act as the primary liaison for internal and external audits related to SAP security and access controls. Support regulatory inspections and compliance assessments. Ensure evidence collection, control documentation, and audit readiness across all SAP environments. Drive closure of audit observations…