Principal SAP Security Control Architect

Location: Mumbai, IN, 400076
- Req ID: 86097
- Facility: Mumbai-470
- Department: Enterprise Solution Architecture
- Division: Innovation

**Basic Function**:
**Roles & Responsibilities**:
A SAP Security Control Architect is responsible for ensuring the security of a company's SAP systems. They develop and implement security policies and procedures, conduct security assessments, and perform audits to identify vulnerabilities and risks. They also design SAP Application Security models (Access control and Process control), manage business workshops for requirement gathering, and convert business requirements into technical design/authorization matrix and documentation.:

- Continuously conducting comprehensive assessments of existing controls frameworks, policies, and procedures within SAP systems to identify weaknesses, gaps, and areas of non-compliance.
- Designing and implementing remediation plans to address identified control deficiencies, ensuring alignment with industry best practices, regulatory requirements, and organizational objectives.
- Collaborating with other LYB IT architects and IT CoE and Product teams to design and implement technical solutions that enhance control mechanisms within SAP landscapes, including configuration changes, system upgrades, and integration with third-party tools.
- Collaborating with internal audit and business stakeholders to understand control requirements and risk assessments.
- Systematically design and implement technical solutions to mitigate control risks using best practices and industry standards.
- Regularly document and communicate control remediation activities and their impact on business processes.
- Staying up-to-date on the latest SAP security threats and vulnerabilities.
- Participating in continuous improvement initiatives to enhance the overall security posture of the SAP environment.
- Providing strategic leadership and creative thinking to help the technical delivery team through the project lifecycle
- Creating conceptual architecture views, Architecture Technical designs, collect and document architecture significant decisions and architecture key constraints
- Analyzing architecture alternatives and provide recommendations on best options, considering input from the development teams
- Working on multiple concurrent projects, meet business expectations, influence outcomes and maintain stated timelines
- Keep up to date on industry architectural standards and trends
- Establishing security controls to ensure protection of LYB systems.
- Creating documents such as System Security Plan (SSP), Security Assessment Report (SAR), Contingency Planning, Incident Response Plan, Technical Risk Assessments(TRA) Plans of Actions and Milestones (POA&Ms)

**Min. Qualifications**:
This is a SAP security control architect position requiring either a degreed professional who possesses a Bachelor's degree in Computer Science, Business or Engineering with a minimum of eight (8) years of relevant experience. This individual must demonstrate strong technical SAP security expertise and knowledge in each of the following technology disciplines:

- Bachelor’s degree or higher in information technology, Computer Science or a related discipline
- 15 years of professional experience in SAP security, controls and remediation.
- Minimum of 5 years of experience in SAP security and controls.
- Proven experience in identifying, analyzing, and remediating SAP control deficiencies.
- In-depth understanding of SAP security concepts, including authorization, segregation of duties, and user access management.
- Experience with GRC tools such as SAP GRC AC or similar solutions.
- Strong understanding of SAP modules (e.g., FI/CO, MM, SD) and associated controls frameworks (e.g., SAP GRC).
- Experience with internal audit methodologies and frameworks is a plus.
- Knowledge of relevant compliance regulations (e.g., SOX, GDPR).
- Strong understanding of data privacy and security best practices is a plus.
- Strong analytical and problem-solving skills.
- Ability to work independently and as part of a team.
- Excellent project management skills.
- Demonstrated problem solving, multi-tasking, troubleshooting skills with a high degree of flexibility
- Experience in Software Development Life Cycle (SDLC) / Agile development / DevOps
- Strong analytical skills with the ability to understand key business processes and related issues
- Strong self-leadership and ability to work independently and manage conflict
- Demonstrated competency in accurately identifying the scope of work and preparing thorough, accurate and detailed schedule estimates.
- Non-functional requirements gathering and solutioning experience
- Ability to develop successful relationships with external and internal partners
- Possessing experience leading end SAP Security implementations and controls integration projects.
- Good understanding of SAP systems such ECC, S/4, Ariba, SuccessFactors and Non-SAP systems such as Sale