SAP Security Lead

About BridgeBio

BridgeBio is a biopharmaceutical company founded to discover, create, test, and deliver transformative medicines to treat patients who suffer from genetic diseases and cancers with clear genetic drivers. We bridge the gap between remarkable advancements in genetic science in academic institutions and the delivery of meaningful medicines to patients. Founded in 2015, the company has built a portfolio of 20+ drug development programs ranging from preclinical to late-stage development in multiple therapeutic areas including genetic dermatology, precision oncology, cardiology, endocrinology, neurology, pulmonology, and renal disease, with two approved drugs.

Our focus on scientific excellence and rapid execution aim to translate today’s discoveries into tomorrow’s medicines. We have U.S. offices in San Francisco, Palo Alto, and Raleigh, with small satellites in other parts of the country. We also have international offices in Montreal, Canada, and Zurich, Switzerland, and are expanding across Europe.

To learn more about our story and company culture, visit us at https://bridgebio.com

Who You Are

We are actively seeking a seasoned SAP Security Lead to architect and manage the security framework for our SAP S/4HANA Private Cloud Edition, Fiori, Business Technology Platform (BTP), and Cloud Identity Access  Governance (IAG). As part of our RISE with SAP journey, this role is central to driving security strategy, governance, and compliance to ensure our SAP environment remains secure, scalable, and aligned with industry best practices. In this position, you will collaborate closely with cross-functional teams to maintain a robust security infrastructure that supports BridgeBio’s mission of advancing transformative work in the life sciences sector. Experience in a GxP-validated environment is essential to meet the compliance and security requirements across our SAP ecosystem. 

In this role, you will have the opportunity to make a direct impact on BridgeBio’s secure digital foundation, supporting innovations in genetic medicine and patient safety. As BridgeBio continues its growth, you’ll have the chance to expand your leadership and influence within our SAP security landscape. 

Responsibilities

Access Control and Advanced User Management: 

• Design and oversee the SAP authorization framework, emphasizing role-based access control, user and role types, and roles/activity groups across SAP S/4HANA Private Cloud, Fiori, BTP, and Cloud IAG
• Advise and manage SAP Identity and Access Control and integration with overall IAM & SSO architecture
• Apply advanced knowledge of SAP’s private cloud security model to manage user administration, ensuring appropriate levels of access while adhering to segregation of duties (SoD) standards
• Collaborate with SAP and third-party vendors to ensure user access configurations align with SAP's best practices for Private Cloud Edition and are optimized for a cloud-based environment

 Compliance and Regulatory Adherence (GxP Validated Environment): 

• Define, implement and maintain SAP security policies and procedures to support compliance with SOX, GxP, GDPR, and life sciences industry standards, ensuring all processes meet rigorous requirements for a validated environment
• Develop metrics and dashboards, reporting on the effectiveness of policies, procedures and controls for all SAP Security platforms
• Use SAP tools for access control, risk analysis, and remediation (RAR), applying SoD mitigation strategies specific to private cloud deployment
• Advise supporting processes as the SAP security subject matter expert
• Ensure audit readiness and establish protocols for continuous access review and regulatory compliance specific to SAP’s Private Cloud Edition, with a focus on GxP standards and validated environments

 Security Architecture and Solution Design in Private Cloud: 

• Serve as a security solution architect, defining SAP security strategies for a private cloud environment and supporting technical designs for cloud security functions
• Assess and address security risks specific to SAP’s Private Cloud Edition, implementing scalable solutions that adhere to cloud security principles and meet complex business and regulatory requirements
• Work closely with cloud operations teams to ensure secure configurations and compliance within the SAP private