Organization: Novo Nordisk Global Business Services (GBS) At Novo Nordisk, our SAP landscape underpins critical business and regulated processes globally — spanning Finance, Supply Chain, Manufacturing, Quality, and R&D. As we continue our S/4HANA transformation journey and expand our SAP Business Technology Platform (BTP) footprint, we are looking for an exceptional SAP Security Architect to lead and own our end-to-end SAP security strategy, architecture, and governance. If you are an expert in SAP security, authorisations, and SAP cyber risk management with a proven track record of designing enterprise-grade SAP security architectures across S/4HANA, BW/HANA, HANA DB, Fiori, and BTP — we want to hear from you. <a style="color:black" name="the-position"></a>The Position <a style="color:black" name="sap-security-architecture-strategy"></a>As a SAP Security Architect, you will be a key technical leader within our SAP Security function, responsible for defining and driving the SAP security architecture, standards, and governance across a complex, global, and regulated SAP landscape. You will work closely with senior stakeholders, cybersecurity leadership, compliance teams, and SAP programme teams to ensure our SAP environment is secure, compliant, and fit for the future. This is a individual contributor and leadership role with significant scope, influence, and visibility across the organisation. SAP security architecture & strategy <ul> <li style="color:black">Define and own the SAP security architecture (on-prem and cloud), including target-state design, standards, reference architectures, and implementation roadmaps.</li> <li style="color:black">Drive security-by-design across SAP programs (new implementations, rollouts, upgrades, and S/4HANA transformations).</li> <li style="color:black">Engage with technical and compliance SMEs, business stakeholders, and vendors to shape direction and delivery outcomes.</li> <li style="color:black">Present SAP security posture, risks, and roadmap to senior leadership and the CISO organisation.</li> </ul> <a style="color:black" name="authorisation-design-implementation-core"></a>Authorisation design & implementation (core) <ul> <li style="color:black">Lead the design and implementation of SAP authorisation concepts and role-based access control (RBAC) across end-to-end business processes (e.g., Finance, Supply Chain, Manufacturing, Quality, HR, BW, ATTP, GBT).</li> <li style="color:black">Establish and govern role design methodology (business roles, derived roles, org-level strategy, SU24 governance, naming conventions, firefighter strategy).</li> <li style="color:black">Streamline and govern role lifecycle processes (intake, build, testing, approvals, transport, periodic review, and recertification).</li> <li style="color:black">Govern change management and transport security processes to ensure integrity of the SAP security landscape.</li> </ul> <a style="color:black" name="s4hana-fiori-modern-ux-security"></a>S/4HANA, Fiori & modern UX security <ul> <li style="color:black">Secure SAP Fiori front-end and SAP Gateway (catalogs/groups/spaces/pages concepts, OData service authorisations, UI/service hardening).</li> <li style="color:black">Design secure authentication and SSO patterns (SAML2/OAuth2, SNC/Kerberos, MFA integration where applicable).</li> </ul> <a style="color:black" name="sap-btp-security-cloud"></a>SAP BTP security (cloud) <ul> <li style="color:black">Design and implement SAP BTP security models (subaccount structure, entitlements, role collections, XSUAA, destinations, Cloud Connector considerations).</li> <li style="color:black">Integrate SAP BTP with enterprise identity providers and SAP cloud identity services (IAS/IPS) and define secure onboarding patterns.</li> <li style="color:black">Define API security standards and integration security patterns for SAP Integration Suite, PI/PO, and other middleware components.</li> </ul> <a style="color:black" name="bwhana-hana-db-security"></a>BW/HANA & HANA DB security <ul> <li style="color:black">Own security design for BW on HANA / BW/4HANA (analysis authorisations, data access controls, authorization-relevant objects).</li> <li style="color:black">Design HANA database security (users/roles, privileges, schemas, auditing, encryption options, secure connectivity patterns).</li> </ul> <a style="color:black" name="Xa0532320cc3598f9c32f4e6beab55c2f202891c"></a>Governance, Risk & Compliance (GRC), audits & controls <ul> <li style="color:black">Lead SAP security controls design and operationalization for internal/external audits (SOX/ITGC and other control frameworks), including evidence readiness and remediation plans.</li> <li style="color:black">Drive Segregation of Duties (SoD) design and remediation, emergency access controls, and continuous control monitoring.</li> <li style="color:black">Partner with cybersecurity teams to align SAP controls to enterprise security requirements (logging/monitoring, vulnerability management, hardening, incident response playbooks for SAP).</li> <li style="color:black">Lead SAP security controls design and operationalization for internal and external audits including SOX/ITGC, GxP/CSV (Computerized System Validation), and other applicable control frameworks.</li> <li style="color:black">Ensure security documentation readiness for GxP-validated SAP systems including User Requirement Specifications (URS), Functional Specifications (FS), and Requirements Traceability Matrices (RTM).</li> <li style="color:black">Leverage SAP security tooling (e.g., SAP EarlyWatch Alert, Security Bridge, Onapsis, or equivalent) for continuous vulnerability management and security monitoring.</li> </ul> <a style="color:black" name="delivery-leadership"></a>Delivery leadership <ul> <li style="color:black">Provide technical leadership to SAP security teams (onshore/offshore), coach senior analysts, and review solution designs and deliverables.</li> <li style="color:black">Define and track key security metrics including SoD violation reduction, audit finding remediation rates, role design quality, and security architecture coverage.</li> </ul> Qualifications To be successful in this role, you should have: <ul> <li style="color:black">Bachelor’s degree in engineering, Computer Science, or related field.</li> <li style="color:black">15–20 years of relevant SAP Security experience, including several full lifecycle implementations and global rollouts.</li> <li style="color:black">Deep hands-on expertise in SAP authorizations and security administration across key SAP modules (S/4, BW, ATTP, GBT) and business processes.</li> <li style="color:black">Strong experience with S/4HANA security and role redesign.</li> <li style="color:black">Strong experience in SAP audit/security and compliance initiatives such as SoD remediation, SOX, and ITGC.</li> <li style="color:black">Proven SAP cybersecurity experience (risk assessments, secure configuration/hardening, security logging/monitoring integration, vulnerability remediation coordination).</li> <li style="color:black">Consulting background strongly preferred; Big 4 consulting experience is highly desirable.</li> <li style="color:black">Ability to work with senior stakeholders and translate business requirements into secure, scalable access designs.</li> <li style="color:black">Excellent communication skills in written and spoken English.</li> </ul> Nice to have (common for SAP Security Architect roles) <ul> <li style="color:black">Experience with SAP GRC Access Control and/or SAP Cloud Identity Access Governance.</li> <li style="color:black">Security certifications (e.g., CISSP, CISA, CISM, CRISC) and/or SAP security-related certifications.</li> <li style="color:black">Experience in regulated environments (e.g., GxP) and validated system landscapes.</li> <li style="color:black">Experience with SAP security vulnerability management tools (e.g., SecurityBridge, Onapsis, Relevant).</li> </ul> Working at Novo Nordisk Every day we seek the solutions that defeat serious chronic diseases. To do this, we approach our work with determination, constant curiosity and a commitment to finding better ways forward. For over 100 years, this dedication has driven us to build a company focused on lasting change for long-term health. One where diverse thinking, shared purpose and mutual respect come together to create extraordinary results. In this role, you’ll be at the forefront of our digital transformation, ensuring the security and integrity of systems that directly impact millions of patients globally. When you join us, you’re not just starting a job – you’re becoming part of a story that spans generations. Deadline : 26 May 2026 (Applications are reviewed on an ongoing basis).We commit to an inclusive recruitment process and equality of opportunity for all our job applicants. At Novo Nordisk, we're not chasing quick fixes – we're creating lasting change for long-term health. For over 100 years, we've been driven by a single purpose: to defeat serious chronic diseases and help millions of people live healthier lives. This dedication fuels our constant curiosity and inspires us to push the boundaries of what's possible in healthcare. We embrace diverse perspectives, seek out bold ideas, and build partnerships rooted in shared purpose. Together, we're making healthcare more accessible, treating and preventing diseases, and pioneering solutions that create change spanning generations. When you join us, you become part of something bigger – a legacy of impact that reaches far beyond today.

Lead Architect-SAP Security (Bangalore, Karnataka, IN) @ novonord

About this role

Ready to apply?