System Specialist I- SAP Application Security

Department- SAP Security & Authorizations Location: Novo Nordisk Global Business Services (GBS), Bangalore Your impact begins here As SAP Application Security Analyst, you will turn Security Bridge alerts and assessment findings into prioritised, traceable action that protects the SAP landscape behind Novo's finance, supply chain, manufacturing, quality and R&D processes. You will investigate suspicious activity, follow fixes through to verified closure and help redesign S/4HANA roles around least-privilege access. Your work reduces risk in regulated, business-critical systems, so colleagues can keep delivering progress for people living with serious chronic diseases. What you’ll bring You are a hands-on SAP security professional who can explain a risk, fix it and prove it is closed. You bring: • A bachelor's degree in Computer Science, Engineering, Information Security or a related discipline, or equivalent practical experience. • Five or more years of SAP security, Basis security or SAP cybersecurity experience, including hands-on investigation and remediation. • Hands-on PFCG role design, build, troubleshooting and controlled deployment in SAP S/4HANA or ECC, with strong knowledge of authorization objects, organizational levels, and single, composite and master-derived roles. • Practical experience with Security Bridge dashboards, threat alerts, vulnerability findings and patch recommendations. • Experience with SU24, SU53, STAUTHTRACE, SUIM and AGR_1251 analysis, plus working knowledge of Fiori launchpad content and backend authorizations. • A sound understanding of S/4HANA and ECC architecture, RFC connections, SAP Gateway/Fiori and HANA security fundamentals. • Experience reviewing SAP security logs and privileged or technical-account activity, and working knowledge of SAP Security Notes, hardening and transports across development, QA and production. • Clear written and spoken English, structured analytical skills and the ability to explain technical risks to technical and business audiences. Useful, but not essential: • Security Bridge configuration, detection-content tuning or SIEM/ITSM integration. • SAP GRC Access Control or similar tooling, and segregation of duties analysis. • Experience in regulated or pharmaceutical environments, including SOX/ITGC controls and GxP change control. • Rollout of redesigned roles across business units or countries, including cutover and hypercare; SAP BTP and integration security; relevant SAP or cybersecurity certifications. What you’ll do You will work as a hands-on individual contributor, within agreed security standards, access permissions and change-management processes. • Monitor and investigate: triage SecurityBridge alerts, separate suspicious activity from expected business or administrative actions, and correlate findings with SAP and HANA logs. Escalate suspected incidents to the SOC and SAP owners within agreed timelines. • Prioritise and remediate: validate vulnerabilities against your installed components and business usage, prioritise by severity, exposure and criticality, and drive remediation tickets with clear owners and due dates. • Verify closure: rescan or retest after changes, attach evidence and document compensating controls and residual risk where immediate correction is not feasible. • Support S/4HANA role redesign: join workshops with functional teams and key users, prepare role-design workbooks, and assess proposed access against least privilege and segregation of duties. • Build and maintain approved PFCG roles, Fiori catalogue, space and page assignments and related authorizations, moving changes in a controlled way through development, QA and production. • Keep SecurityBridge sharp and auditable: check system coverage and data freshness, tune alerts with documented approval, support SIEM and ITSM integration, and report on response times and finding age in line with SOX/ITGC and GxP procedures. Who you’ll work with You will join the SAP Security & Authorizations team in Enterprise IT & Quality, where colleagues work across the Novo value chain to deliver trusted technology, high quality and responsible ways of working. The team supports security architecture, access governance and operational security across a global SAP landscape serving business-critical and GxP-regulated processes. Your closest partner is the SAP Security Architect, who you will agree priorities with and escalate design changes and unresolved risk to. You will also work with Basis, HANA database administrators, ABAP developers, business application teams, cybersecurity/SOC, functional teams, key users and external service providers. Clear ownership and open, timely communication keep findings and role changes moving, so risk is reduced faster. What you can expect here You will be trusted to own your work, with clear expectations and the support to perform at your best. You will build new skills across SAP security, access governance and monitoring, and see your contribution in measurable risk reduction across a global landscape. Your voice counts: you will be encouraged to share your expertise and challenge how things are done, then commit and move forward together. Start now Your impact begins today. If you are ready to turn security findings into verified progress across a global SAP landscape, apply for the SAP Application Security Analyst role by 25 November 2026. Applications are reviewed on an ongoing basis, so we encourage you to apply as soon as possible. Location: Bangalore Work Mode: Hybrid (3 days) Application Deadline - 25 November 2026 We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.