Senior Consultant - Security

Job description

Job Title: Senior Consultant - Security GCL: D1 Introduction to role: Are you ready to secure a global SAP transformation and turn compliance into a catalyst for speed and scale? Join us to design the security backbone of a multi-country SAP program that underpins how we discover, develop, and deliver medicines to patients worldwide. As a key technical contributor, you will shape robust, auditable security across S/4HANA, Fiori, ECC, BI/BW, GRC, and HANA databases—ensuring resilient operations and enabling faster, safer releases. You will translate complex requirements into clear, scalable designs that teams across continents can adopt, using automation and AI to reduce toil and raise quality. You will align controls and Segregation of Duties with a seamless user experience that accelerates the business! Accountabilities: • SAP Security Architecture and Design: Define end-to-end security architecture for SAP applications and HANA databases, meeting functional needs while strengthening resilience and auditability. • Compliance and Risk Partnership: Work closely with risk and compliance partners to develop scalable, sustainable controls that remain SOx and audit compliant across regions. • Engineer role concepts and SoD-aware designs that reduce conflicts and enable secure, efficient access at scale. • Lead Fiori authorization design, covering Pages & Spaces, app support, and unified launchpad for a secure, intuitive user experience. • Configure and handle GRC Access Control capabilities to implement preventive and detective controls and streamline access processes. • Plan and complete security activities for upgrades and transformations, safeguarding continuity while introducing improved controls. • Develop automation for repetitive tasks and leverage AI-supported insights to accelerate investigation, testing, documentation, and stakeholder updates, with human validation and auditability. • Monitor, report, and enhance manual/automated SOx controls; continuously evaluate simplification and automation opportunities. • Deliver clear, structured communications tailored to technical and non-technical audiences; engage business users and engineering leadership to align on requirements and outcomes. • Prepare security test scenarios, support test phases, perform cutover activities, and provide steady-state support that reduces risk and improves user confidence. • Provide architectural guidance that improves design quality across teams and drives consistent adoption of standards and guidelines. Essential Skills/Experience: • In-depth SAP Security understanding & implementation experience in S/4 HANA & Fiori, ECC, BI/BW, GRC Access Controls • Well versed with foundational Security concepts across various business processes • Comprehensive knowledge of SAP role design considering segregation of duties (SoD) • In-depth understanding of Fiori authorization concepts, UI/UX aspects with SAP Security Space (Pages & Spaces, App Support, unified launchpad) • Experience in requirement gathering, designing roles for hub & embedded deployment of S/4 HANA • Practical experience in configuration of GRC Access Control modules (ARA, ARM, ARA & BRM) • Hands-on experience in handling SAP SoD ruleset (Create, operate & maintain) • Hands-on experience on Security activities for SAP system upgrade/transformation • Very good understanding of integration of SAP modules in end-to-end business processes • Ability to understand business requirements from business users and prepare functional specifications, prepare test scenarios inclusive of security design, support during various test phases, perform cutover activities & post go-live support. • Accountable/Responsible to provide audit support, monitor & report manual/automated SOx controls, coordinate and connect with various partners on effective execution of SOx controls • Evaluate & drive enhancements to existing SOx Controls to improve efficiency and effectiveness, evaluate scope for simplification & automation. • Practical experience using AI tools in day-to-day professional work to improve productivity, documentation quality, analysis, and workflow efficiency, with sound judgment, data protection awareness, and human review of outputs. • Proactive approach to problem solving. • Ability to work in large and diverse teams. • Superb communication and interpersonal skills. Desirable Skills/Experience: • SAP S/4HANA related certification or willingness to complete such certification. • Exposure to SAP Solution Manager, JIRA, UI/UX tools Why AstraZeneca: Here, your craft in security directly supports the delivery of life‑changing medicines. You will work at the intersection of science and advanced technology—cloud platforms, data and AI—backed by real investment and a mandate to innovate. Expect to partner with diverse experts across the enterprise—engineers, analysts, and scientists in the same room—unleashing bold thinking that scales securely and sustainably. We combine high standards with trust and autonomy, encouraging experimentation through forums like hackathons while providing the coaching and feedback to grow. We move fast, value kindness alongside ambition, and rally around a clear purpose: enabling colleagues to perform at their peak so patients benefit sooner. Call to Action: Be responsible for the security foundation of a global SAP platform—take the n