Sr. Spec. DDIT APD Shared Services SAM A&IM

Sr. Spec. DDIT APD Shared Services SAM A&IM

Novartis

Working together, we can reimagine medicine to improve and extend people’s lives.

Job Description Summary

As a Subject Matter Expert of SAP Access & Identity Management and SAP Security/ GRC, you are responsible for SAP security operation, design, implementation and audit, ensuring compliance and efficiency of user access management.

Job Description

Major accountabilities:

• Responsible for global access management/ operation, ensure processes are effectively operated and in compliance manner.
• Responsible for the overall continuous improvement, security control implementation, life cycle of security document and training.
• Responsible for audit facing and support including walkthrough, collection of evidence and governance of audit deliverable and resolve any audit issues.
• Serve as the subject matter expert (SME) for security enhancement, providing expert advice and guidance to business and compliance stakeholders.
• Advises peers and management on complex issues, provides complex, contextual advice to influence the management for any new implementation and risk across business domains.
• Support vendor service performance, ensuring quality standards are met.

Key performance indicators:

• Ensure adherence of operation/vendor are meeting the control objective and agreed SLA/KPI.
• Ensure appropriateness of implementation of security control and ensure no gap in the design and operation.
• Ensure improvement/enhancement initiatives are implemented on time.
• Ensure regular successful audits related to user access management and all gaps are addressed on time.

Minimum Requirements:

Work Experience:

• Bachelor’s degree in engineering, Computer Science/Information Technology.
• Extensive experience in SAP/Application Security and Identity Management.
• Proven track records, preferably with more than 3 end-to-end project experiences in SAP S&A implementation and support of large-scale global operations.
• Experience in audit and control design.
• Experience in managing vendor services and ensuring alignment with security standards.
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with risk/governance management and CISA/CISM certification is a strong plus.

Skills:

• Excellent level of functional and technical knowledge of SAP security & authorization.
• Excellent level of audit and control of Identity access management.
• Strong knowledge in identity lifecycle management concept including role design, RBAC, SoD, Least Privilege principle and good understanding on IAM IT general controls/regulatory compliance requirements.
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with other identity lifecycle management products is a strong plus.
• Possess great analytical and consulting skills to provide recommendations and solutions for user access design gaps and remediation.

Skills (summary)

• SAP Security & Authorization design
• Audit & Risk management
• Analytical & problem-solving
• Collaboration & Stakeholder management
• Project management
• Vendor service management

Languages:

English.

Why Novartis: Helping people with disease and their families takes more than innovative science. It takes a community of smart, passionate people like you. Collaborating, supporting, and inspiring each other. Combining to achieve breakthroughs that change patients’ lives. Ready to create a brighter future together?