SAP Security & Vulnerability - SME Manager

Job Title: SAP Security & Vulnerability - SME Manager Location: Bangalore

ABOUT UNILEVER

With 3.4 billion people in over 190 countries using our products every day, Unilever is a business that makes a real impact on the world. Work on brands that are loved and improve the lives of our consumers and the communities around us. We are driven by our purpose: to make sustainable living commonplace, and it is our belief that doing business the right way drives superior performance. At the heart of what we do is our people – we believe that when our people work with purpose, we will create a better business and a better world. At Unilever, your career will be a unique journey, grounded in our inclusive, collaborative, and flexible working environment. We don’t believe in the ‘one size fits all’ approach and instead we will equip you with the tools you need to shape your own future.

ABOUT GDT:

GDT is the global digital and technology engine of Unilever offering business services, technology, and enterprise solutions. GDT serves over 190 locations and through a network of specialized service lines and partners delivers insights and innovations, user experiences and end-to-end seamless delivery making Unilever Purpose Led and Future Fit.

Purpose of the Role

The Manager - Secure Operations is accountable for ensuring the security, compliance, resilience, and operational effectiveness of Unilever's SAP landscape. The role leads the end-to-end governance of cyber security, vulnerability management, audit assurance, access governance, and risk management across SAP platforms and associated technologies. The role acts as the primary interface between SAP Technical Services, Cyber Security, Platform Security, Infrastructure, Engineering, Internal Audit, and external partners to ensure the SAP estate remains secure, compliant, and audit-ready while enabling business continuity and operational excellence.

Main Accountabilities

Secure Operations & Cyber Security Governance

• Lead SAP Secure Operations across the global SAP landscape and supporting technologies.
• Ensure compliance with Unilever Cyber Security Standards, Policies, and Control Frameworks.
• Define and drive security governance processes, standards, controls, and assurance activities.
• Provide leadership and oversight for security-related operational activities across SAP platforms.

Vulnerability & Exposure Management

• Own and govern vulnerability management processes across App, Infrastructure, Cloud, and supporting platforms.
• Drive remediation of SAP Security Notes (HotNews), Qualys, Wiz, Guardium, and other cyber security findings.
• Monitor vulnerability SLAs and ensure timely remediation through effective stakeholder engagement and governance.
• Provide executive visibility of security posture, remediation progress, and residual risk.

Audit, Assurance & Compliance

• Lead audit readiness and remediation activities for Corporate Audits, Operational Excellence Reviews, Penetration Tests, Internal Control Framework (ICF), and external assurance engagements.
• Ensure closure of audit observations within agreed timelines.
• Maintain evidence repositories and control effectiveness documentation to support audit and compliance requirements.
• Drive continuous improvement initiatives based on audit outcomes and assurance reviews.

Cyber Risk Management

• Govern cyber risk identification, assessment, mitigation, exception management, and risk acceptance activities.
• Drive remediation plans for identified risks through enterprise governance processes.
• Maintain visibility of risk posture and provide reporting to leadership forums.
• Ensure appropriate governance for security exceptions and compensating controls.

Identity & Access Governance

• Oversee Joiner-Mover-Leaver (JML) processes, privileged access governance, and periodic access reviews.
• Ensure appropriate segregation of duties and access management controls.
• Support compliance and regulatory requirements relating to access governance.

Performance & Reporting

• Establish and monitor security KPIs, KRIs, compliance metrics, audit status, and operational dashboards.
• Deliver executive-level reporting and insights to senior leadership.
• Track operational performance and drive corrective actions where required.
• Provide strategic recommendations to improve security maturity and operational effectiveness.

Continuous Improvement & Operational Excellence

• Drive continual service improvement initiatives across Secure Operations.
• Enhance governance processes, automation opportunities, and operational efficiencies.
• Support transformation initiatives that strengthen the cyber resilience of the SAP estate.
• Promote a culture of accountability, ownership, and proactive risk management.

Key Stakeholders

Internal

• SAP Technical Services Leadership
• Cyber Security Teams
• Platform Security Team (PST)
• OneBASIS Teams
• Infrastructure & Cloud Services
• Engineering Teams
• Internal Audit
• SAP Security & Risk & Management Teams

External

• Deloitte
• Accenture
• IBM
• SAP
• External Auditors

Critical Success Measures

• Vulnerability remediation compliance against agreed SLAs
• Reduction in Critical and High security findings
• Audit observation closure within agreed timelines
• Compliance with Cyber Security Standards and Policies
• Risk reduction and exception management effectiveness
• Access governance and certification completion rates
• Security KPI and KRI performance
• Operational service stability and resilience

Skills & Experience

Essential

• Extensive experience in SAP Security, SAP Basis, Cyber Security, Risk Management.
• Strong understanding of vulnerability management, audit assurance, governance, and compliance frameworks.
• Experience managing enterprise cyber security tools such as Qualys, Wiz, Guardium, SIEM, and vulnerability management platforms.
• Experience leading cross-functional global teams and stakeholder relationships.
• Strong analytical, governance, and executive communication skills.
• Demonstrated ability to influence senior stakeholders and drive risk remediation outcomes.

Preferred

• Experience within large global enterprise SAP environments.
• Knowledge of Cyber Security Frameworks (NIST, ISO27001, CIS).
• Understanding of SOX, ICF, GDPR, and regulatory compliance requirements.
• Professional certifications such as CISM, CRISC, CISSP, SAP Security, or equivalent.

Leadership Behaviours

• Ownership & Accountability
• Consumer and Business Focus
• Growth Mindset
• Collaboration & Partnership
• Risk-Based Decision Making
• Continuous Improvement
• Deliver with Excellence
• Lead Through Influence

LEADERSHIP SKILLS

• CARE DEEPLY: We care about how consumers experience our brands, the growth and development of our people, and their impact on the planet. We emphasize the importance of performance and care, moving from ambiguity about success to fairness and transparency.
• FOCUS ON WHAT COUNTS: We prioritize what truly matters, setting clear and stretching goals. We aim to shift from having everything as a priority to focusing on fewer, bigger things that are delivered to conclusion and are being rewarded.
• STAY THREE STEPS AHEAD: We encourage bold and creative thinking to make breakthroughs in performance. We focus on anticipating and staying ahead of consumer needs and external trends, shifting from reacting to leading, shaping, and disrupting the market.
• DELIVER WITH EXCELLENCE: The emphasis is on delivering everything with excellence and pace, taking personal ownership, and holding each other accountable. We aim to shift from pride in thinking to pride in execution, developing breakthrough solutions and ensuring the best outcomes.

“Our commitment to Equality, Diversity & Inclusion” Unilever embraces diversity and encourages applicants from all walks of life! This means giving full and fair consideration to all applicants and continuing development of all employees regardless of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage and civil partnership, and pregnancy and maternity. Note: "All official offers from Unilever are issued only via our Applicant Tracking System (ATS). Offers from individuals or unofficial sources may be fraudulent—please verify before proceeding."