SAP Solution Architect Security (all genders) at Merck Serono SA

Weiterstadt, Hesse, Germany -

Full Time

Start Date

Immediate

Expiry Date

10 Jul, 26

Salary

0.0

Posted On

11 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SAP Security, S/4HANA, ECC, SAP Fiori, SAP NetWeaver, Cybersecurity, Authorization Concepts, SAP Basis, Threat Modeling, ABAP, Risk Management, Stakeholder Management, NIS2, KRITIS, CISSP

Industry

Pharmaceutical Manufacturing

Description

Work Your Magic with us! Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us. Your role: This position offers the opportunity to make a significant impact on our SAP Security strategy and contributes to the overall safety of our digital assets. As a vital member of the ERP Architecture team, you will lead the security architecture across the SAP ecosystem (S/4HANA, ECC, SAP Fiori, SAP NetWeaver) and related platforms. You will translate the enterprise security framework into pragmatic, robust SAP security controls in collaboration with ERP Security Experts as well as identify deviations from defined controls, prioritize remediation, and validate closure with evidence-based metrics. You will also influence secure by design through architecture reviews, threat modeling, and secure development practices for ABAP and non-ABAP components. Furthermore, as part of the role you will facilitate cross-functional collaboration with SAP Basis, SAP operation and development, network and infrastructure, and audit teams. You will communicate risks, controls status, and remediation plans clearly to executives and technical stakeholders as well as collaborate to ensure consistent adherence to security policies across SAP landscapes. You will stay current on SAP security trends and regulatory requirements affecting our ecosystem. Who you are: Bachelor’s degree in information technology, computer science, or related field; CISSP certification preferred. 4–9 years of hands-on experience in SAP security domains (authorization concepts, SAP Basis/security administration, and SAP cybersecurity practices); experience across SAP S/4HANA, SAP ECC, and SAP Fiori. Proven track record in implementing and operating security controls within SAP applications and platforms; experience with NIS2 and KRITIS regulations is a plus. Solid communication skills in English; German language proficiency is advantageous. Problem-solving mindset with the ability to translate technical findings into business risk implications and actionable remediation plans. Strong collaboration and stakeholder management capabilities across security, basis, development, and operations teams. Demonstrated ability to translate complex security concepts into clear, actionable strategies for executives and technical staff. What we offer: We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We believe that this variety drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress! Apply now and become a part of a team that is dedicated to Sparking Discovery and Elevating Humanity!

Responsibilities

You will lead the security architecture across the SAP ecosystem, translating enterprise security frameworks into robust controls. Additionally, you will facilitate cross-functional collaboration to ensure consistent adherence to security policies and communicate risk status to stakeholders.