ERP User Access Management Lead

Job title

ERP User Access Management Lead

Location

Hyderabad

Opella is the self-care challenger with the purest and third-largest portfolio in the Over-The-Counter (OTC) & Vitamins, Minerals & Supplements (VMS) market globally.

Our mission is to bring health in people’s hands by making self-care as simple as it should be. For half a billion consumers worldwide – and counting.

At the core of this mission is our 100 loved brands, our 11,000-strong global team, our 13 best-in-class manufacturing sites and 4 specialized science and innovation development centers. Headquartered in France, Opella is the proud maker of many of the world’s most loved brands, including Allegra, Buscopan, Doliprane, Dulcolax, Enterogermina, Essentiale and Mucosolvan.

B Corp certified in multiple markets, we are active players in the journey towards healthier people and planet. Find out more about our mission at www.opella.com.

About the job

We are seeking to construct a best-in-class digital organization, where the ERP will be a solid, adaptive backbone of our systems and our supporting functions applications are innovation technology solutions that give our business the (digital) wings to fly everyday! Interested to know more? Contact us!

We are looking for SAP User Access Management Lead, reporting to ERP Operations and tooling Lead to support complex business transformations and programs in the area of SAP security and access while helping to implement and sustain future Access Control and GRC tooling.

SAP User Access Management Lead will manage the entire SAP User Access Management domain, leading a team of three UAM experts, and focusing on employee growth and development.

Main responsibilities

Strategic Leadership & Roadmap Execution

End-to-End Domain Ownership: Own and govern all User Access Management (UAM) activities for both project deployments and Run operations across the SAP ecosystem (S4HANA, Fiori, BW) and integrated Identity Management platforms (e.g., Saviynt).

Roadmap & Strategy Implementation: Lead the strategic UAM solution roadmap, with implementation of Saviynt as replacement of SAP GRC, evaluating costs, benefits, and value creation while aligning with Enterprise Architecture, Internal Control policies, and emerging industry standards.

Stakeholder & Vendor Management: Partner with cross-functional digital teams (Infra, Security, Platform), business stakeholders, and external partners to translate complex business needs into secure, scalable technical solutions.

Governance, Risk, Compliance (GRC) & Security Controls

GRC & IdM Architecture: Design, configure, and implement end-to-end SAP GRC Access Control (including BRM and Emergency Access Management/Firefighter) to facilitate seamless, compliant UAM operations.

Audit & SOX Ownership: Act as the IT Control Owner for ERP systems, leading regulatory compliance campaigns, annual User Access Reviews (UAR), and external/internal audits (specifically annual SOX campaigns).

Risk & SoD Mitigation: Perform advanced risk and impact analysis for custom developments, ensuring Segregation of Duties (SoD) risks are strictly managed and covered by business mitigating controls.

Elevated Access Governance: Oversee sensitive and privileged access provisioning under the Emergency Access Management framework, ensuring rigorous approval workflows and log review validation controls.

Operations Management, Delivery & Support (RUN)

Target Operating Model Design: Define and optimize the UAM Run organization; align on Incident and Change Management processes, monitor operational KPIs, and proactively manage resource gaps or service bottlenecks.

L3 Technical Escalation: Provide Level 3 expert technical support and consultation to internal and offshore AMS/UAM teams on deep authorization logic, complex configurations, and system upgrades/downtime support.

Incident & Breach Response: Manage high-priority UAM escalations, security breaches, and audit points, collaborating with stakeholders for swift resolution and minimal business disruption.

Project Lifecycle, Role Design & Hypercare Transition

Scalable Role Lifecycle Management: Govern the SAP role design lifecycle (build, test, deploy) tailored for a high-growth environment spanning multiple countries and expanding user bases.

Project Scoping & Delivery: Advise Project Managers on optimal UAM workstream structures, resource estimations, and requirement gathering to guarantee accurate project scoping.

Hypercare to Run Transition: Secure and monitor the seamless transition of UAM deliverables from project Hypercare over to the steady-state RUN organization during global SAP rollouts.

Community, Training & Continuous Improvement

Continuous Optimization: Proactively initiate system health checks, data clean-up activities, and process enhancements to maintain a lean, highly secure authorization model.

Community Engagement & Training: Lead the creation of robust UAM documentation, deliver comprehensive training programs, and animate the Key User community to drive security awareness and process adoption.

About You

Experience & Core Expertise

SAP Security Lead: 10+ years of experience in SAP Authorizations and UAM across S/4HANA, Fiori, BW/4HANA, and SAP GRC AC (10.x+). Knowledge of IdM tools like Saviynt is a strong asset.

Leadership & Global Delivery: Track record of coaching small UAM teams and managing multi-tier, multi-geography service models within global companies (preferably FMCG/FMCH).

Project & Vendor Management

Experienced in Agile/Digital methodologies and managing offshore/vendor UAM teams to protect the global Core Model.

Tech-Forward Mindset

Proven ability to leverage emerging tech, with a specific focus on automation and AI applications within UAM workflows.

Compliance & Technical Skills

GRC & Audit

Strong command of ITGCs, SOX compliance, GxP standards, and internal control frameworks.

Ecosystem Tools

Proficient in ServiceNow, Jira, Confluence, and SAP Solution Manager.

Risk & Archi