Platform Engineer, SAP GRC & Application control

As an Applications Controls Engineer at Astellas Pharma Inc., you will play a crucial role in driving digital initiatives forward in the agile organization. The agile operating model consists of two components - Digital Capability and Digital Execution. Digital Execution involves aligning missions around business goals and enabling collaboration on a larger scale. On the other hand, Digital Capability focuses on the growth and development of individuals within a specific expertise area. This dual structure enables efficient scaling of agile practices while maintaining a focus on both product development and individual skill enhancement. **Responsibilities And Accountabilities:** - **SAP GRC Configuration and Management:** Configure, manage, and optimize SAP GRC modules such as Access Control, Process Control, and Risk Management to ensure effective governance, risk mitigation, and compliance with internal and external regulations. - **Develop and manage SAP security roles and authorizations** across SAP ECC, S/4HANA, SAP Fiori, SAC, and other modules. Support SAP security upgrades and patching activities. - **Conduct risk analysis and remediation** using SAP GRC. Monitor and manage SAP system security logs and alerts. - **Application Control Implementation:** Design and implement robust application controls within SAP and other systems to safeguard against unauthorized access, data breaches, and fraud. Ensure controls align with best practices. - **Compliance and Auditing:** Conduct regular audits and compliance checks within SAP and other relevant systems to identify vulnerabilities or non-compliance issues. Collaborate with auditors to address findings. - **Risk Assessment and Mitigation:** Perform risk assessments related to SAP and other applications. Develop strategies to mitigate identified risks and integrate risk management practices. - **Incident Response and Resolution:** Respond to security incidents and compliance breaches. Collaborate with cybersecurity teams to investigate incidents, implement corrective actions, and prevent future occurrences. - **Training and Support:** Provide training and support to SAP users on GRC processes and application controls. Develop user guides and support documentation. - **Continuous Improvement:** Monitor and evaluate the effectiveness of SAP GRC processes and controls. Implement improvements to enhance security, compliance, and efficiency. - **Stakeholder Collaboration:** Collaborate with business units and external partners to ensure SAP GRC initiatives align with business objectives. Communicate effectively with stakeholders. **Required Qualifications:** - Bachelors or Masters degree in relevant field (e.g., Computer Science, Data Science, Finance). - Strong technical knowledge of SAP GRC modules. - Deep understanding of application control frameworks. - Knowledge of risk assessment methodologies and compliance requirements. - Excellent analytical and problem-solving skills. - Familiarity with SAP architecture and security principles. - Strong communication and interpersonal skills. - Ability to adapt to changing regulatory environments and technology landscapes. **Preferred Qualifications:** - Knowledge of SAP IDM and SAP Cloud Security. - Exposure to SAP GRC Process Control and Risk Management. - Understanding of ABAP code for security trace/debug purposes. - Experience working with agile software design methodology. - Strong troubleshooting skills and ability to interface with the business. - Self-motivated with dedication to continuous learning. - Experience with SAP BTP, SAP IAS/IPS, and cloud platform security. Astellas is committed to equality of opportunity in all aspects of employment. EOE including Disability/Protected Veterans.,