SAP Security & Vulnerability - SME Manager
Hindustan Unilever · Bengaluru · onsite · Posted 2d ago
Undisclosed8–14 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Title: SAP Security Vulnerability - SME Manager
Location: Bangalore
ABOUT UNILEVER
ABOUT GDT:
GDT is the global digital and technology engine of Unilever offering business services, technology, and enterprise solutions. GDT serves over 190 locations and through a network of specialized service lines and partners delivers insights and innovations, user experiences and end-to-end seamless delivery making Unilever Purpose Led and Future Fit.
Purpose of the Role
The Manager - Secure Operations is accountable for ensuring the security, compliance, resilience, and operational effectiveness of Unilevers SAP landscape. The role leads the end-to-end governance of cyber security, vulnerability management, audit assurance, access governance, and risk management across SAP platforms and associated technologies.
The role acts as the primary interface between SAP Technical Services, Cyber Security, Platform Security, Infrastructure, Engineering, Internal Audit, and external partners to ensure the SAP estate remains secure, compliant, and audit-ready while enabling business continuity and operational excellence.
Main Accountabilities
Secure Operations Cyber Security Governance
- Lead SAP Secure Operations across the global SAP landscape and supporting technologies.
- Ensure compliance with Unilever Cyber Security Standards, Policies, and Control Frameworks.
- Define and drive security governance processes, standards, controls, and assurance activities.
- Provide leadership and oversight for security-related operational activities across SAP platforms.
Vulnerability Exposure Management
- Own and govern vulnerability management processes across App, Infrastructure, Cloud, and supporting platforms.
- Drive remediation of SAP Security Notes (HotNews), Qualys, Wiz, Guardium, and other cyber security findings.
- Monitor vulnerability SLAs and ensure timely remediation through effective stakeholder engagement and governance.
- Provide executive visibility of security posture, remediation progress, and residual risk.
Audit, Assurance Compliance
- Lead audit readiness and remediation activities for Corporate Audits, Operational Excellence Reviews, Penetration Tests, Internal Control Framework (ICF), and external assurance engagements.
- Ensure closure of audit observations within agreed timelines.
- Maintain evidence repositories and control effectiveness documentation to support audit and compliance requirements.
- Drive continuous improvement initiatives based on audit outcomes and assurance reviews.
Cyber Risk Management
- Govern cyber risk identification, assessment, mitigation, exception management, and risk acceptance activities.
- Drive remediation plans for identified risks through enterprise governance processes.
- Maintain visibility of risk posture and provide reporting to leadership forums.
- Ensure appropriate governance for security exceptions and compensating controls.
Identity Access Governance
- Oversee Joiner-Mover-Leaver (JML) processes, privileged access governance, and periodic access reviews.
- Ensure appropriate segregation of duties and access management controls.
- Support compliance and regulatory requirements relating to access governance.
Performance Reporting
- Establish and monitor security KPIs, KRIs, compliance metrics, audit status, and operational dashboards.
- Deliver executive-level reporting and insights to senior leadership.
- Track operational performance and drive corrective actions where required.
- Provide strategic recommendations to improve security maturity and operational effectiveness.
Continuous Improvement Operational Excellence
- Drive continual service improvement initiatives across Secure Operations.
- Enhance governance processes, automation opportunities, and operational efficiencies.
- Support transformation initiatives that strengthen the cyber resilience of the SAP estate.
- Promote a culture of accountability, ownership, and proactive risk management.
Key Stakeholders
Internal
- SAP Technical Services Leadership
- Cyber Security Teams
- Platform Security Team (PST)
- OneBASIS Teams
- Infrastructure Cloud Services
- Engineering Teams
- Internal Audit
- SAP Security Risk Management Teams
External
- Deloitte
- Accenture
- IBM
- SAP
- External Auditors
Critical Success Measures
- Vulnerability remediation compliance against agreed SLAs
- Reduction in Critical and High security findings
- Audit observation closure within agreed timelines
- Compliance with Cyber Security Standards and Policies
- Risk reduction and exception management effectiveness
- Access governance and certification completion rates
- Security KPI and KRI performance
- Operational service stability and resilience
Skills Experience
Essential
- Extensive experience in SAP Security, SAP Basis, Cyber Security, Risk Management.
- Strong understanding of vulnerability management, audit assurance, governance, and compliance frameworks.
- Experience managing enterprise cyber security tools such as Qualys, Wiz, Guardium, SIEM, and vulnerability management platforms.
- Experience leading cross-functional global teams and stakeholder relationships.
- Strong analytical, governance, and executive communication skills.
- Demonstrated ability to influence senior stakeholders and drive risk remediation outcomes.
Preferred
- Experience within large global enterprise SAP environments.
- Knowledge of Cyber Security Frameworks (NIST, ISO27001, CIS).
- Understanding of SOX, ICF, GDPR, and regulatory compliance requirements.
- Professional certifications such as CISM, CRISC, CISSP, SAP Security, or equivalent.
Leadership Behaviours
- Ownership Accountability
- Consumer and Business Focus
- Growth Mindset
- Collaboration Partnership
- Risk-Based Decision Making
- Continuous Improvement
- Deliver with Excellence
- Lead Through Influence
LEADERSHIP SKILLS
- CARE DEEPLY: We care about how consumers experience our brands, the growth and development of our people, and their impact on the planet. We emphasize the importance of performance and care, moving from ambiguity about success to fairness and transparency.
- FOCUS ON WHAT COUNTS: We prioritize what truly matters, setting clear and stretching goals. We aim to shift from having everything as a priority to focusing on fewer, bigger things that are delivered to conclusion and are being rewarded.
- STAY THREE STEPS AHEAD: We encourage bold and creative thinking to make breakthroughs in performance. We focus on anticipating and staying ahead of consumer needs and external trends, shifting from reacting to leading, shaping, and disrupting the market.
- DELIVER WITH EXCELLENCE: The emphasis is on delivering everything with excellence and pace, taking personal ownership, and holding each other accountable. We aim to shift from pride in thinking to pride in execution, developing breakthrough solutions and ensuring the best outcomes.
Our commitment to Equality, Diversity Inclusion
Note: "All official offers from Unilever are issued only via our Applicant Tracking System (ATS). Offers from individuals or unofficial sources may be fraudulent-please verify before proceeding. "
This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationAccess ManagementAudit AssuranceATSCyberCismcloud servicesbusiness continuityGdprauditscisspcriscenterprise solutionsCYBER RISKapplicant tracking systemGuardiumcloudCommunication Skillscompliance
About Hindustan Unilever
Hindustan Unilever
FMCG
18.8k+
employees
1872
154 years old
Mumbai, Maharashtra
India
About
Hindustan Unilever meets everyday needs for nutrition, hygiene and personal care with brands that help people feel good, look good and get more out of life.
Industries
FMCGBiotech & Life sciencesHealthcare / PharmaRetailPharma
Employees rate it well for
Salary585Work Culture561Work Life Balance522Learning504Career Growth482
Find them on