Architect, Technology II (SAP Security)

Company Description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

Job Description

Design, architect, manage, and implement SAP security and GRC solutions that protect and solve significant business technology investments and problems. Generate new security and GRC design proposals and lead those efforts to investigate, identify, and implement state-of-the-art technology platforms that drive efficiency and security gains throughout multiple business areas.   This position will be accountable to ensure high quality solutions designs that meet current and anticipated business and security needs.   Responsibilities include evaluating alternatives to satisfy business security objectives, estimating and planning security and GRC projects, management and oversight of onshore and offshore SAP security/GRC analysts, cross-project process governance, and support of compliance and audit needs.  

Key Responsibilities: 
Leads, participates or coordinates end-to-end execution of Security & GRC solutions, related projects and technology implementations. Introduces best practice and process improvement ideas. 

• Experience and thorough SAP security & GRC knowledge across multiple SAP technologies including: GRC 10.1, S/4 HANA database 2.0, Fiori, SAC, BPC, BTP, EWM, GTS, Nakissa, Solution Manager, among others. 

• Understands core business processes and key security controls.  Experience working with SOX compliance requirements, Segregation of Duties, and other controls principles. 

• Solutioning security/GRC integrations across SAP and non-SAP platforms including identity management technologies, HR systems, data analytic platforms, and cybersecurity monitoring tools.  

• Identifying, monitoring, and implementing SAP ABAP system and HANA database hardening standards. 

• Demonstrate creative 'out of the box' thinking to solve difficult problems, leverage AI to achieve efficiencies and champion new technologies to achieve project goals working with both technology and business stakeholders. 

• Reviewing and approving day-to-day security or GRC changes implemented by team of security analysts to ensure alignment to security standards and global templates.  

• Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, SOX compliance, data security, and the software development lifecycle. 

Qualifications

Required:

• Bachelor's Degree with 8 years experience; Master's Degree with 7 years experience; PhD with 3 years of experience.

• Expert level knowledge in SAP security authorization, role design, build, testing, user-to-role mapping methodologies across multiple SAP applications.  

• Expert level knowledge in GRC Access Controls in areas of configuration, interfaces, development, data loads, ruleset, and business roles.  

• Exposure of handling SAP system life cycle (SLC) process, documentation (in Solution Manager), testing (Quality Center), ticketing (ServiceNow).   

• Knowledge of applicable regulations and standards affecting Pharmaceutical Products (e.g. GMP). 

• Managing SAP projects and teams; working knowledge of all aspects of the SAP ASAP methodology including Applications, Integration, Data, Security, Change Management, Training, and Communications. 

• Hands-on experience planning and facilitating blue print workshops. 

• Ability to resolve complex issues in high stress and high pressure situations. 

• Effective communication and influencing Senior Leaders in business and IT. 

• Critical Thinking. 

• Coaching and mentoring business and IT resources to ensure effective and sustainable application designs. 

• Ability to travel globally.