Senior Platform Manager, SAP Security

Stellenbeschreibung Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You work with the information security team as a competent and experienced information security and compliance leader. How you will contribute You will assess information security risks in line with internal policies and external best practices and determine requirements how to secure Mondelēz International information and IT assets. In addition, you will develop security standards and policies; advise technical teams when developing relevant procedures or have operational security questions; review and consulting them on compliant and effective use of common tools. You will also keep business stakeholders apprised on the overall security and compliance roadmap, provide training on information security to appropriate teams, and develop security strategies, architectures and roadmaps across process and technologies. What you will bring A desire to drive your future and accelerate your career. You will bring experience and knowledge in: Information security, compliance and risk management Understanding security solutions and their applicability to Mondelēz International Developing security strategies, awareness campaigns, policies/standards, and governance Communicating effectively with technical specialists, leaders and peers Commercially astute Leadership and people management skills More about this role SAP Security Sr. Platform Manager is responsible to provide strategic and operational leadership across SAP Security and GRC functions, ensuring a secure, compliant, and well-governed technical landscape spanning S/4HANA, BTP, Fiori, and all integrated systems within the RISE with SAP ECC environment. This SME manages a team responsible for role design, access controls, compliance, and audit readiness across all SAP S/4HANA and integrated systems, driving role design initiatives for both greenfield and brownfield implementations while ensuring our GRC posture remains robust and audit-ready at all times. They partner closely with SAP Functional teams, business process owners, Audit, InfoSec, Systems Integrators, and third-party technology providers to ensure secure, compliant, and scalable SAP operations. They serve as the bridge between IT Security, Internal Controls, and Internal Audit, translating technical security configurations into the language of risk, compliance, and business assurance. This is not a purely technical role. While deep hands-on SAP security expertise is essential, the ideal candidate will bring executive presence, cross-functional influence, and the ability to lead teams through complex transformation programs while maintaining a strong control environment. Role Details: Security Design, Architecture & Role Governance Own the SAP role design standard, including role catalog governance, the authorization concept, segregation of duties (SoD) frameworks, mitigation controls, and access request workflows, ensuring designs are clean core aligned and sustainable across the program lifecycle. This encompasses the complete spectrum of security design across S/4HANA, EWM, Fiori, BW, ECC, BTP, and other integrated platforms: building scalable role architectures, defining and configuring authorization objects at a granular level, and establishing user access controls that are both operationally practical and compliant with enterprise policy. Lead security workstreams in both greenfield and brownfield S/4HANA programs. Should be comfortable operating across all project phases, from blueprint and design workshops through build, testing, cutover, and hypercare and be able to make pragmatic decisions that keep transformation timelines on track without compromising security integrity. GRC Configuration, Management & Segregation of Duties Own full accountability for leading SAP GRC platform operations covering Access Control (AEM, ARM, BRM, EAM), Firefighter and Emergency Access Management processes, periodic access reviews, SoD conflict analysis, and continuous controls monitoring, maintaining audit-ready posture at all times. Audit Readiness & Compliance Own SOX, internal and external audit readiness for the SAP Security landscape, including access control evidence management, risk logs, mitigation plans, and remediation tracking in close partnership with Internal Audit, External Audit, and Information Security teams. This means partnering closely with control owners to ensure IT General Controls (ITGCs) and application controls within SAP are properly designed, operating effectively, and well-documented. Own and respond to audit inquiries with clear and complete evidence, proactively identify control gaps before they become findings, and maintain access control matrices, role-to-risk mappings, and authorization object inventories that auditors can rely on. When findings do arise, this platform manager will own the remediation roadmap and drive it to closure. SI & Partner Governance Govern the security deliverables of the SI and vendor partners, ensuring secure solution design, adherence to established standards, quality of security-related work products, and timely risk escalation and remediation. They will hold partners accountable to the organization's security framework and ensure that externally delivered configurations meet compliance requirements before they enter the production landscape. Security Architecture Partnership Partner with SAP Technical leadership and Solution Architects to define and maintain secure solution patterns, and security architecture aligned to the RISE platform. Transformation & Go-Live Security Leadership Provide security leadership during go-lives, cutovers, system refreshes, environment provisioning, ensuring security controls are validated, access is appropriately provisioned, and risk is formally accepted or mitigated prior to each milestone. SAP Security Sr. Platform Manager is responsible to provide strategic and operational leadership across SAP Security and GRC functions, ensuring a secure, compliant, and well-governed technical landscape spanning S/4HANA, BTP, Fiori, and all integrated systems within the RISE with SAP ECC environment. This SME manages a team responsible for role design, access controls, compliance, and audit readiness across all SAP S/4HANA and integrated systems, driving role design initiatives for both greenfield and brownfield implementations while ensuring our GRC posture remains robust and audit-ready at all times. They partner closely with SAP Functional teams, business process owners, Audit, InfoSec, Systems Integrators, and third-party technology providers to ensure secure, compliant, and scalable SAP operations. They serve as the bridge between IT Security, Internal Controls, and Internal Audit, translating technical security configurations into the language of risk, compliance, and business assurance. This is not a purely technical role. While deep hands-on SAP security expertise is essential, the ideal candidate will bring executive presence, cross-functional influence, and the ability to lead teams through complex transformation programs while maintaining a strong control environment. Role Details: Security Design, Architecture & Role Governance Own the SAP role design standard, including role catalog governance, the authorization concept, segregation of duties (SoD) frameworks, mitigation controls, and access request workflows, ensuring designs are clean core aligned and sustainable across the program lifecycle. This encompasses the complete spectrum of security design across S/4HANA, EWM, Fiori, BW, ECC, BTP, and other integrated platforms: building scalable role architectures, defining and configuring authorization objects at a granular level, and establishing user access controls that are both operationally practical and compliant with enterprise policy. Lead security workstreams in both greenfield and brownfield S/4HANA programs. Should be comfortable operating across all project phases, from blueprint and design workshops through build, testing, cutover, and hypercare and be able to make pragmatic decisions that keep transformation timelines on track without compromising security integrity. GRC Configuration, Management & Segregation of Duties Own full accountability for leading SAP GRC platform operations covering Access Control (AEM, ARM, BRM, EAM), Firefighter and Emergency Access Management processes, periodic access reviews, SoD conflict analysis, and continuous controls monitoring, maintaining audit-ready posture at all times. Audit Readiness & Compliance Own SOX, internal and external audit readiness for the SAP Security landscape, including access control evidence management, risk logs, mitigation plans, and remediation tracking in close partnership with Internal Audit, External Audit, and Information Security teams. This means partnering closely with control owners to ensure IT General Controls (ITGCs) and application controls within SAP are properly designed, operating effectively, and well-documented. Own and respond to audit inquiries with clear and complete evidence, proactively identify control gaps before they become findings, and maintain access control matrices, role-to-risk mappings, and authorization object inventories that auditors can rely on. When findings do arise, this platform manager will own the remediation roadmap and drive it to closure. SI & Partner Governance Govern the security deliverables of the SI and vendor partners, ensuring secure solution design, adherence to established standards, quality of security-related work products, and timely risk escalation and remediation. They will hold partners accountable to the organization's security framework and ensure that externally delivered configurations meet compliance requirements before they enter the production landscape. Security Architecture Partnership Partner with SAP Technical leadership and Solution Architects to define and maintain secure solution patterns, and security architecture aligned to the RISE platform. Transformation & Go-Live Security Leadership Provide security leadership during go-lives, cutovers, system refreshes, environment provisioning, ensuring security controls are validated, access is appropriately provisioned, and risk is formally accepted or mitigated prior to each milestone. Salary and Benefits: The base salary range for this position is $140,300 to $192,940; the exact salary depends on several factors such as experience, skills, education and location. In addition to base salary, this position is eligible for participation in a highly competitive bonus program with possibility for overachievement based on performance and company results. In addition, Mondelez International offers the following benefits: health insurance, wellness and family support programs, life and disability insurance, retirement savings plans, paid leave programs, education related programs, paid holidays and vacation time. Some of these benefits have eligibility requirements. Many of these benefits are subsidized or fully paid for by the company. Steht Umzugsbeihilfe zur Verfügung? Es wird keine Umzugsunterstützung angeboten Geschäftsbereich Zusammenfassung Die Vereinigten Staaten sind der größte Markt in der Familie von Mondelēz International, mit einer großen Mitarbeiterzahl und hohem Volumen in der Fertigung. Hier produzieren wir die Lieblingsprodukte vieler Haushalte, um Verbraucher mit dem richtigen Snack zum richtigen Zeitpunkt und auf die richtige Art und Weise hergestellt zu versorgen. Wir haben in den gesamten USA Büros, Vertriebs-, Fertigungs- und Distributionsstandorte, um sicherzustellen, dass Verbraucher unsere Klassiker, darunter Marken wie Oreo und Chips Ahoy! Kekse, Ritz, Wheat Thins und Triscuit Cracker und Swedish Fish und Sour Patch Kids Süßwarenprodukte überall im Land in ihrer Nähe finden. Mondelēz Global LLC ist ein Equal Opportunity/Affirmative Action-Arbeitgeber. Alle qualifizierten Bewerber und Bewerberinnen werden ohne Rücksicht auf ihre ethnische Herkunft, Hautfarbe, Religion, Geschlecht, sexuelle Orientierung, Geschlechtsidentität, Staatsangehörigkeit, Behinderungen, geschützten Veteranenstatus oder andere gesetzlich geschützte Merkmale berücksichtigt. Bewerber und Bewerberinnen, die für die Teilnahme am Bewerbungsprozess eine Unterkunft benötigen, können sich an Tel.: 847-943-5460 wenden, um Hilfestellung zu erhalten. Weitere Informationen zu Ihren Bundesrechten finden Sie in EEOpost.pdf; EEO ist das Gesetz - Plakatbeilage; Transparenz und Nichtdiskriminierung bei der Bezahlung; Kennen Sie Ihre Rechte: Diskriminierung am Arbeitsplatz ist illegal. Stellentyp Regulär Information Security Technology & Digital Bei Mondelēz International sehen wir es als unsere Aufgabe, Menschen mit dem richtigen Snack zum richtigen Zeitpunkt und auf die richtige Art und Weise hergestellt zu versorgen. Das bedeutet, eine breite Palette an köstlichen, qualitativ hochwertigen Snacks zu liefern, die die wichtigen Momente des Lebens bereichern, hergestellt mit nachhaltigen Zutaten und Verpackungen, bei denen sich die Verbraucher gut fühlen können. Wir haben ein reichhaltiges Portfolio mit starken Marken – sowohl global als auch lokal. Darunter befinden sich viele bekannte Marken wie Oreo, belVita und LU im Segment Kekse; Cadbury Dairy Milk, Milka und Toblerone im Segment Schokolade; Sour Patch Kids Candy und Trident Kaugummi. Wir sind stolz, weltweit bei Keksen, Schokolade und Süßwaren auf Platz 1 zu sein sowie auf Platz 2 bei Gummi- und Geleeartikeln. Unsere 80.000 exzellenten Fachkräfte und Macher sind in Betriebe in mehr als 80 Länder verteilt und verkaufen unsere Produkte in über 150 Ländern auf der ganzen Welt. Sie wollen wachsen und nur mit ihnen können wir unsere Ziele und Werte leben. Wir sind eine diverse Gemeinschaft, die etwas bewegen kann; und das schnell. Werde Teil unserer Gemeinschaft und Mach’s zu deinem Moment!

Salary : $140,300