Landscape Security, Compliance & KEC Manager

Unilever

• University degree
• 5+ years SAP security experience
• Experience in the engagement of key, senior level stakeholders, along with proven ability to influence and manage relationships with those stakeholders
• Very good understanding of SAP Roles & Authorisations concept
• Very good understanding of IT SOX compliance
• Experience in design and implementation and execution of IT security policies
• Experience in SAP Basis technology
• Good understanding of ITIL procedures
• Fluent in English

İŞ TANIMI

• Owns IT SOX controls for the landscape, acts as the process owner for SOX, makes sure evidences are kept and shared with external auditors; deficiencies are resolved on time and in full
• Acts as a single face to Global Security, Risk and Compliance teams on the compliance activities
• Works with global teams, to understand baseline security standards, assesses impacts of implementation on the landscape and ensures that they are implemented for the landscape
• Coordinates planning, resourcing and schedule of audits for the landscape with required teams
• Follows up the audit processes for the landscape, owns the audit points, ensures all teams involved are taking necessary actions
• Designs and implements policy and procedures to ensure appropriate levels of authorisation can be granted to the users without compromising security
• Owns the ERP KEC agenda for the entire landscape, starting from the agreement of the version levels with relevant global teams to the planning and execution of the KEC projects.
• Initiates and manages projects to cover Compliance & KEC requirements
• Ensures that necessary licenses to comply with licensing requirements are in place, keeps the evidences for licenses ready for inspection when required. Reviews the organic growth of system from all aspects (user number, data size, etc) and takes the necessary actions to make sure that the required licenses are procured before the project is allowed to go live
• Works with countries and global teams to remove obsolete users from the landscape continuously, to eliminate waste in license costs (both procurement & maintenance)