Platform Engineer, SAP Security

Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You work with the information security team as a competent and experienced information security and compliance specialist. How you will contribute  This role will be responsible for the design, engineering, governance, and continuous optimization of SAP security and access controls, with a strong focus on S/4HANA role architecture, business process alignment, automation, SAP GRC, Segregation of Duties (SoD), vulnerability management, compliance, and integration with enterprise IAM capabilities. The ideal candidate combines deep SAP Security and S/4HANA technical expertise with a strong understanding of business processes, internal controls, IAM, and large-scale transformation programs. This person will partner closely with SAP Basis, functional teams, IAM, Cybersecurity, Internal Audit, Compliance, and business stakeholders to build secure and sustainable solutions.

SAP S/4HANA Security & Transformation Lead and execute SAP Security activities supporting S/4HANA transformation and modernization initiatives. Design and implement scalable SAP security architecture for a multi-operating-company / multi-region environment. Lead SAP role redesign and rationalization, including business-role architecture, composite/single roles, derived roles, organizational values, and authorization objects. Translate business process requirements into secure and appropriately segregated SAP access models. Identify opportunities to simplify, standardize, and harmonize security roles across operating companies while accommodating legitimate local requirements. Support SAP cutover, migration, testing, UAT, and go-live security activities.

Engineering & Access Controls  Design and engineer SAP roles based on least privilege, business need, and risk-based access principles. Perform role analysis, remediation, rationalization, and optimization across existing SAP environments. Establish and maintain role design standards, naming conventions, ownership models, and approval processes. Identify and eliminate excessive, conflicting, dormant, and unnecessary access. Design controls for privileged and sensitive SAP access, including emergency/firefighter access. Partner with IAM teams to integrate SAP access with enterprise IGA, SSO, MFA, PAM/PIM, and identity lifecycle processes. Act as a security SME during business process transformation and operating-model changes. Support SAP license-rightsizing initiatives while maintaining required security and business functionality. SAP GRC & SoD   Configure, administer, and optimize SAP GRC Access Control capabilities, including: Access Risk Analysis Business Role Management Access Request Management Emergency Access Management SoD and critical-access analysis Perform SoD risk analysis during role design, remediation, provisioning, and business transformation. Partner with Internal Audit, Compliance, and business control owners to define appropriate mitigating controls. Support periodic access reviews and certification activities. SAP Security Operations Partner with SAP Basis and infrastructure teams on SAP vulnerability management, security hardening, patching, and remediation. Assess SAP security advisories, SAP Notes, vulnerabilities, and configuration risks and coordinate remediation with appropriate technical teams. Collaborate with Cybersecurity/SOC teams on SAP logging, monitoring, alerting, and security operations. Automation & Continuous Improvement :  Evaluate and leverage SAP Joule and SAP Business AI capabilities to automate and streamline SAP Security activities, including access analysis, role design, security operations, risk identification, troubleshooting, and security-related user support. Identify opportunities to apply AI to SAP role engineering, SoD analysis, access certification, vulnerability management, and security