Senior Platform Manager, SAP Security

Mondelēz International•East Hanover, NJ

35d•$140,300 - $192,940•Remote

About The Position

The SAP Security Sr. Platform Manager is responsible for providing strategic and operational leadership across SAP Security and GRC functions. This role ensures a secure, compliant, and well-governed technical landscape spanning S/4HANA, BTP, Fiori, and all integrated systems within the RISE with SAP ECC environment. The incumbent manages a team responsible for role design, access controls, compliance, and audit readiness across all SAP S/4HANA and integrated systems, driving role design initiatives for both greenfield and brownfield implementations while ensuring our GRC posture remains robust and audit-ready at all times. This role partners closely with SAP Functional teams, business process owners, Audit, InfoSec, Systems Integrators, and third-party technology providers to ensure secure, compliant, and scalable SAP operations. They serve as the bridge between IT Security, Internal Controls, and Internal Audit, translating technical security configurations into the language of risk, compliance, and business assurance. This is not a purely technical role; while deep hands-on SAP security expertise is essential, the ideal candidate will bring executive presence, cross-functional influence, and the ability to lead teams through complex transformation programs while maintaining a strong control environment.

Requirements

Experience and knowledge in information security, compliance and risk management
Understanding of security solutions and their applicability to Mondelēz International
Experience in developing security strategies, awareness campaigns, policies/standards, and governance
Ability to communicate effectively with technical specialists, leaders and peers
Commercially astute
Leadership and people management skills
Deep hands-on SAP security expertise
Executive presence
Cross-functional influence
Ability to lead teams through complex transformation programs while maintaining a strong control environment
Experience with S/4HANA, BTP, Fiori, and integrated systems within the RISE with SAP ECC environment
Experience with SAP GRC platform operations covering Access Control (AEM, ARM, BRM, EAM), Firefighter and Emergency Access Management processes, periodic access reviews, SoD conflict analysis, and continuous controls monitoring
Experience with SOX, internal and external audit readiness for SAP Security landscape
Experience with IT General Controls (ITGCs) and application controls within SAP

Nice To Haves

Experience in greenfield and brownfield S/4HANA programs
Experience operating across all project phases, from blueprint and design workshops through build, testing, cutover, and hypercare

Responsibilities

Own the SAP role design standard, including role catalog governance, the authorization concept, segregation of duties (SoD) frameworks, mitigation controls, and access request workflows, ensuring designs are clean core aligned and sustainable across the program lifecycle.
Build scalable role architectures, define and configure authorization objects at a granular level, and establish user access controls that are both operationally practical and compliant with enterprise policy.
Lead security workstreams in both greenfield and brownfield S/4HANA programs, operating across all project phases from blueprint and design workshops through build, testing, cutover, and hypercare.
Make pragmatic decisions that keep transformation timelines on track without compromising security integrity.
Lead SAP GRC platform operations covering Access Control (AEM, ARM, BRM, EAM), Firefighter and Emergency Access Management processes, periodic access reviews, SoD conflict analysis, and continuous controls monitoring, maintaining audit-ready posture at all times.
Own SOX, internal and external audit readiness for the SAP Security landscape, including access control evidence management, risk logs, mitigation plans, and remediation tracking in close partnership with Internal Audit, External Audit, and Information Security teams.
Partner closely with control owners to ensure IT General Controls (ITGCs) and application controls within SAP are properly designed, operating effectively, and well-documented.
Respond to audit inquiries with clear and complete evidence, proactively identify control gaps before they become findings, and maintain access control matrices, role-to-risk mappings, and authorization object inventories.
Own the remediation roadmap for any audit findings and drive them to closure.
Govern the security deliverables of the SI and vendor partners, ensuring secure solution design, adherence to established standards, quality of security-related work products, and timely risk escalation and remediation.
Hold partners accountable to the organization's security framework and ensure that externally delivered configurations meet compliance requirements before they enter the production landscape.
Partner with SAP Technical leadership and Solution Architects to define and maintain secure solution patterns and security architecture aligned to the RISE platform.
Provide security leadership during go-lives, cutovers, system refreshes, and environment provisioning, ensuring security controls are validated, access is appropriately provisioned, and risk is formally accepted or mitigated prior to each milestone.
Assess information security risks in line with internal policies and external best practices and determine requirements how to secure Mondelēz International information and IT assets.
Develop security standards and policies; advise technical teams when developing relevant procedures or have operational security questions; review and consult them on compliant and effective use of common tools.
Keep business stakeholders apprised on the overall security and compliance roadmap.
Provide training on information security to appropriate teams.
Develop security strategies, architectures and roadmaps across process and technologies.