SAP Security Business Systems Consultant

SAP Security Business Systems Consultant

AbbVie (NYSE:ABBV) is a global, research-based biopharmaceutical company formed in 2013 following separation from Abbott. AbbVie combines the focus and passion of a leading-edge biotech with the expertise and capabilities of a long-established pharmaceutical leader to develop and market advanced therapies that address some of the world's most complex and serious diseases. AbbVie employs approximately 25,000 people worldwide and markets medicines in more than 170 countries.

The SAP Security Business Systems Consultant is responsible for ensuring AbbVie maintains a compliant and stable SAP security environment. SAP security and GRC control owner for all AbbVie SAP SOX. Primary point of contact for internal and external audit walkthroughs, questions or issues and ensuring audit requests are fulfilled. Oversees the day-to-day SAP Security processes by overseeing managed service provider to ensure incidents and service requests are processed within service level agreement. Generate new security and GRC design proposals and lead those efforts to investigate, identify, and implement state-of-the-art technology platforms that drive efficiency and security gains for multiple business areas. Responsibilities include evaluating alternatives to satisfy business security objectives, estimating and planning security and GRC projects, management and oversight of onshore and offshore SAP security/GRC analysts.

Key Responsibilities:

• Leads, participates or coordinates end-to-end execution of SAP security & GRC solutions, related projects and technology implementations. Introduces best practice and process improvement ideas.
• SAP security and GRC control owner for all AbbVie SAP SOX. Monitor day-to-day security incidents and tasks to ensure high customer satisfaction and ensure vendor meets all service levels.
• Reviewing and approving security or GRC changes implemented by team of security analysts to ensure alignment to security standards and global templates.
• Identifying, monitoring, and implementing SAP ABAP system and HANA database hardening standards. Ability to work with cybersecurity principles & controls and apply to SAP environments
• Understand and adhere to corporate standards regarding applicable Corporate and Divisional Policies, including code of conduct, safety, SOX compliance, data security, and the software development lifecycle.
• Exposure of handling SAP system life cycle (SLC) process, documentation (in Solution Manager), testing (Quality Center), ticketing (ServiceNow).
• Managing SAP projects and teams; working knowledge of all aspects of the SAP ASAP methodology including Applications, Integration, Data, Security, Change Management, Training, and Communications.

Qualifications:

• Bachelor's Degree with 6 years' experience; Master's Degree with 5 years' experience; PhD with 0 years' experience.
• Experience and thorough SAP security & GRC knowledge across multiple SAP technologies including: GRC12, S/4HANA, SRM, BW, HANA Database 2.0, Fiori, SAC, EWM, GTS, Nakisa, Solution Manager, among others.
• Detailed design, implementation, and operational experience with SAP technical components including SAP Single Sign-on and the SAP GUI client.
• Understands core business processes and key security controls. Experience working with SOX compliance requirements, Segregation of Duties, and other controls principles.
• Knowledge of applicable regulations and standards affecting Pharmaceutical Products (e.g. GMP).
• Ability to resolve complex issues in high stress and high-pressure situations.
• Critical Thinking.
• Work experience in the pharmaceutical industry.
• Ability to travel globally.

Key AbbVie Competencies:

• Builds strong relationships with peers and cross functionally and with partners outside of team to enable higher performance.
• Learns fast, grasps the 'essence' and can change course quickly where indicated.
• Raises the bar and is never satisfied with the status quo.
• Creates a learning environment, open to suggestions and experimentation for improvement.
• Embraces the ideas of others, nurtures innovation and manages innovation to reality.

Additional Information:

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

Recruitment Fraud Alert

• AbbVie will never request sensitive personal information (such as bank account details, social security numbers, or payment of any kind) during the recruitment process.
• If you suspect you have received a fraudulent offer or communication claiming to be from AbbVie, please do not respond, open any attachments, or click on any hyperlinks.

If you have any questions or concerns regarding the authenticity of a communication alleged to have been made by or on behalf of AbbVie, please contact us immediately.

Protect yourself by verifying job offers and communications. Your safety is important to us.

Pay Range: $96500 - 183500 USD

Where We Work

Role is primarily site- or office-based but can occasionally be performed remotely. Employees who are site/office-based and can occasionally perform their role virtually work both in the office and remotely*, following the policies and regulations in place at their location. US Employees must be in the office on Tuesday, Wednesday, and Thursday with flexibility to work remotely on Mondays and Fridays. Three days in the office is the minimum; some individuals or teams may require more in-office days due to meetings, business/project needs or their role.