- *Job title** : *ERP User Access Management Lead*
Opella is the self\-care challenger with the purest and **third\-largest portfolio in the Over\-The\-Counter (OTC) \& Vitamins, Minerals \& Supplements (VMS) market globally** .
Our mission is to bring health in people’s hands by **making self\-care as simple as it should be** . For half a billion consumers worldwide – and counting.
At the core of this mission is our **100 loved brands** , our **11,000\-strong global team, our 13 best\-in\-class manufacturing sites** and 4 specialized science and innovation development centers. Headquartered in France, Opella is the proud maker of many of the world’s most loved brands, including Allegra, Buscopan, Doliprane, Dulcolax, Enterogermina, Essentiale and Mucosolvan.
- *B Corp certified in multiple markets** , we are active players in the journey towards healthier people and planet. Find out more about our mission at www.opella.com .
- We are seeking to construct a best\-in\-class digital organization, where the ERP will be a solid, adaptive backbone of our systems and our supporting functions applications are innovation technology solutions that give our business the (digital) wings to fly everyday! Interested to know more? Contact us!
- We are looking for **SAP User Access Management Lead** , reporting to **ERP Operations and tooling Lead** to support complex business transformations and programs in the area of SAP security and access while helping to implement and sustain future Access Control and GRC tooling.
- **SAP User Access Management Lead** will manage the entire SAP User Access Management domain, leading a team of three UAM experts, and focusing on employee growth and development.
- **Main responsibilities:***
- *Strategic Leadership \& Roadmap Execution**
- **End\-to\-End Domain Ownership:** Own and govern all User Access Management (UAM) activities for both project deployments and Run operations across the SAP ecosystem (S4HANA, Fiori, BW) and integrated Identity Management platforms (e.g., Saviynt).
- **Roadmap \& Strategy Implementation:** Lead the strategic UAM solution roadmap, with implementation of Saviynt as replacement of SAP GRC, evaluating costs, benefits, and value creation while aligning with Enterprise Architecture, Internal Control policies, and emerging industry standards.
- **Stakeholder \& Vendor Management:** Partner with cross\-functional digital teams (Infra, Security, Platform), business stakeholders, and external partners to translate complex business needs into secure, scalable technical solutions.
- *Governance, Risk, Compliance (GRC) \& Security Controls**
- **GRC \& IdM Architecture:** Design, configure, and implement end\-to\-end SAP GRC Access Control (including BRM and Emergency Access Management/Firefighter) to facilitate seamless, compliant UAM operations.
- **Audit \& SOX Ownership:** Act as the IT Control Owner for ERP systems, leading regulatory compliance campaigns, annual User Access Reviews (UAR), and external/internal audits (specifically annual SOX campaigns).
- **Risk \& SoD Mitigation:** Perform advanced risk and impact analysis for custom developments, ensuring Segregation of Duties (SoD) risks are strictly managed and covered by business mitigating controls.
- **Elevated Access Governance:** Oversee sensitive and privileged access provisioning under the Emergency Access Management framework, ensuring rigorous approval workflows and log review validation controls.
- *Operations Management, Delivery \& Support (RUN)**
- **Target Operating Model Design:** Define and optimize the UAM Run organization; align on Incident and Change Management processes, monitor operational KPIs, and proactively manage resource gaps or service bottlenecks.
- **L3 Technical Escalation:** Provide Level 3 expert technical support and consultation to internal and offshore AMS/UAM teams on deep authorization logic, complex configurations, and system upgrades/downtime support.
- **Incident \& Breach Response:** Manage high\-priority UAM escalations, security breaches, and audit points, collaborating with stakeholders for swift resolution and minimal business disruption.
- *Project Lifecycle, Role Design \& Hypercare Transition**
- **Scalable Role Lifecycle Management:** Govern the SAP role design lifecycle (build, test, deploy) tailored for a high\-growth environment spanning multiple countries and expanding user bases.
- **Project Scoping \& Delivery:** Advise Project Managers on optimal UAM workstream structures, resource estimations, and requirement gathering to guarantee accurate project scoping.
- **Hypercare to Run Transition:** Secure and monitor the seamless transition of UAM deliverables from project Hypercare over to the steady\-state RUN organization during global SAP rollouts.
- *Community, Training \& Continuous Improvement**
- **Continuous Optimization:** Proactively initiate system health checks, data clean\-up activities, and process enhancements to maintain a lean, highly secure authorization model.
- **Community Engagement \& Training:** Lead the creation of robust UAM documentation, deliver comprehensive training programs, and animate the Key User community to drive security awareness and process adoption.
- *Experience \& Core Expertise**
- **SAP Security Lead:** 10\+ years of experience in SAP Authorizations and UAM across **S/4HANA, Fiori, BW/4HANA** , and **SAP GRC AC (10\.x\+)** . Knowledge of IdM tools like **Saviynt** is a strong asset.
- **Leadership \& Global Delivery:** Track record of coaching small UAM teams and managing multi\-tier, multi\-geography service models within global companies (preferably FMCG/FMCH).
- **Project \& Vendor Management:** Experienced in **Agile/Digital** methodologies and managing offshore/vendor UAM teams to protect the global Core Model.
- **Tech\-Forward Mindset:** Proven ability to leverage emerging tech, with a specific focus on **automation and AI applications** within UAM workflows.
- *Compliance \& Technical Skills**
- **GRC \& Audit:** Strong command of ITGCs, **SOX compliance** , GxP standards, and internal control frameworks.
- **Ecosystem Tools:** Proficient in **ServiceNow, Jira, Confluence** , and SAP Solution Manager.
- **Risk \& Architecture:** Ability to perform fact\-based risk analysis and effectively defend the Core Model position to diverse stakeholders.
- **Communication \& Adaptability:** Excellent negotiation, conflict\-resolution, and workshop\-facilitation skills in multicultural environments.
- **Analytical \& Autonomous:** Results\-driven, highly autonomous, with strong writing and solution\-formalization skills.
- **Cultural Fit:** Embodying our 4 core values:
+ *All\-in\-together* (Team player)
+ *Outcome\-obsessed* (Results\-driven)
+ *Courageous* (Handles escalations/challenges)
+ *Radically simple* (Streamlines complex structures)
- *Education \& Languages**
- **Education:** Bachelor’s Degree in IT, Engineering, or equivalent.
- **Languages:** Fluent English (written and spoken).
At Opella, you will enjoy doing challenging, purposeful work, empowered to develop consumer brands with passion and creativity. This is your chance to grow new skills and be part of a bold, collaborative, and inclusive culture where people can thrive and be at their best every day.
We are dedicated to making self\-care as simple as it should be. That starts with our culture. We are challengers by nature, and this is how we do things:
- *All In Together:** We keep each other honest and have each other's backs.
- *Courageous:** We break boundaries and take thoughtful risks with creativity.
- *Outcome\-Obsessed:** We are personally accountable, driving sustainable impact and results with integrity.
- *Radically Simple:** We strive to make things simple for us and simple for consumers, as it should be.
Join us on our mission. Health. In your hands.
www.opella.com/en/careers