Platform Engineer, SAP Security

Are You Ready to Make It Happen at Mondelēz International

Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

You work with the information security team as a competent and experienced information security and compliance specialist.

How you will contribute

This role will be responsible for the design engineering governance and continuous optimization of SAP security and access controls with a strong focus on S/4HANA role architecture business process alignment automation SAP GRC Segregation of Duties (SoD) vulnerability management compliance and integration with enterprise IAM capabilities.

The ideal candidate combines deep SAP Security and S/4HANA technical expertise with a strong understanding of business processes internal controls IAM and large-scale transformation programs. This person will partner closely with SAP Basis functional teams IAM Cybersecurity Internal Audit Compliance and business stakeholders to build secure and sustainable solutions.

What you will bring

SAP S/4HANA Security & Transformation

• Lead and execute SAP Security activities supporting S/4HANA transformation and modernization initiatives.
• Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment.
• Lead SAP role redesign and rationalization including business-role architecture composite/single roles derived roles organizational values and authorization objects.
• Translate business process requirements into secure and appropriately segregated SAP access models.
• Identify opportunities to simplify standardize and harmonize security roles across operating companies while accommodating legitimate local requirements.
• Support SAP cutover migration testing UAT and go-live security activities.

Role Engineering & Access Controls

Design and engineer SAP roles based on least privilege business need and risk-based access principles.

• Perform role analysis remediation rationalization and optimization across existing SAP environments.
• Establish and maintain role design standards naming conventions ownership models and approval processes.
• Identify and eliminate excessive conflicting dormant and unnecessary access.
• Design controls for privileged and sensitive SAP access including emergency/firefighter access.
• Partner with IAM teams to integrate SAP access with enterprise IGA SSO MFA PAM/PIM and identity lifecycle processes.
• Act as a security SME during business process transformation and operating-model changes.
• Support SAP license-rightsizing initiatives while maintaining required security and business functionality.

SAP GRC & SoD

• Configure administer and optimize SAP GRC Access Control capabilities including:
  • Access Risk Analysis
  • Business Role Management
  • Access Request Management
  • Emergency Access Management
  • SoD and critical-access analysis
• Perform SoD risk analysis during role design remediation provisioning and business transformation.
• Partner with Internal Audit Compliance and business control owners to define appropriate mitigating controls.
• Support periodic access reviews and certification activities.

SAP Security Operations

• Partner with SAP Basis and infrastructure teams on SAP vulnerability management security hardening patching and remediation.
• Assess SAP security advisories SAP Notes vulnerabilities and configuration risks and coordinate remediation with appropriate technical teams.
• Collaborate with Cybersecurity/SOC teams on SAP logging monitoring alerting and security operations.

Automation & Continuous Improvement:

• Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities including access analysis role design security operations risk identification troubleshooting and security-related user support.
• Identify opportunities to apply AI to SAP role engineering SoD analysis access certification vulnerability management and security monitoring while maintaining appropriate human oversight and control validation.
• Partner with SAP and enterprise AI teams to ensure AI-enabled SAP capabilities follow security privacy authorization and governance requirements.

Compliance & Controls

• Ensure SAP security controls meet applicable SOX internal control audit regulatory and corporate cybersecurity requirements.
• Provide evidence and support for internal and external audits.
• Design sustainable security controls that are embedded into SAP processes rather than dependent on manual intervention.
• Maintain security documentation control procedures risk assessments and remediation plans.

Required Qualifications

• Bachelors degree in Computer Science Information Technology Cybersecurity or related field or equivalent experience.
• 8 years of SAP Security experience with significant hands-on experience in SAP S/4HANA.
• Strong experience designing and implementing SAP roles and authorization models.
• Demonstrated experience with S/4HANA transformation role redesign and security modernization.
• Experience working in a large global multi-operating-company environment.
• Demonstrated experience implementing AI based automation for operational efficiency.
• Strong analytical problem-solving and communication skills.

Preferred Qualifications

• Experience with SAP Joule SAP Business AI or AI-enabled SAP security and automation capabilities.
• Understanding of AI security authorization data protection and governance considerations within SAP environments.
• Experience with SAP Fiori security and embedded analytics.
• Experience with SAP Cloud / BTP security and hybrid SAP environments.
• Experience with SAP Identity Management or integration with IGA platforms such as SailPoint.
• Experience with SAP license optimization.
• Experience supporting large-scale global SAP transformations.
• Experience with security architecture Zero Trust and risk-based access models.

The base salary range for this position is $86900 to $119515; the exact salary depends on several factors such as experience skills education and addition to base salary this position is eligible for participation in a highly competitive bonus program with possibility for overachievement based on performance and company results.

In addition Mondelez International offers the following benefits: health insurance wellness and family support programs life and disability insurance retirement savings plans paid leave programs education related programs paid holidays and vacation time. Some of these benefits have eligibility requirements. Many of these benefits are subsidized or fully paid for by the company.

No Relocation support available

The United States is the largest market in the Mondelēz International family with a significant employee and manufacturing footprint. Here we produce our well-loved household favorites to provide our consumers with the right snack at the right moment made the right way. We have corporate offices sales manufacturing and distribution locations throughout the U.S. to ensure our iconic brandsincluding Oreo and Chips Ahoy! cookies Ritz Wheat Thins and Triscuit crackers and Swedish Fish and Sour Patch Kids confectionery products are close at hand for our consumers across the country.

Mondelēz Global LLC is an Equal Opportunity Employer/Protected Veterans/Persons with Disabilities. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin disability protected Veteran status sexual orientation gender identity gender expression genetic information or any other characteristic protected by law. Applicants who require accommodation to participate in the job application process may contact for assistance.

For more information about your Federal rights please see; EEO is the Law Poster Supplement; Pay Transparency Nondiscrimination Provision; Know Your Rights: Workplace Discrimination is Illegal

Regular

Information Security

Technology & Digital