Job Title: SAP Security & Vulnerability - SME Manager
Location: Bangalore
ABOUT UNILEVER
With 3.4 billion people in over 190 countries using our products every day, Unilever is a business that makes a real impact on the world. Work on brands that are loved and improve the lives of our consumers and the communities around us. We are driven by our purpose: to make sustainable living commonplace, and it is our belief that doing business the right way drives superior performance. At the heart of what we do is our people – we believe that when our people work with purpose, we will create a better business and a better world.
At Unilever, your career will be a unique journey, grounded in our inclusive, collaborative, and flexible working environment. We don’t believe in the ‘one size fits all’ approach and instead we will equip you with the tools you need to shape your own future.
ABOUT GDT:
GDT is the global digital and technology engine of Unilever offering business services, technology, and enterprise solutions. GDT serves over 190 locations and through a network of specialized service lines and partners delivers insights and innovations, user experiences and end-to-end seamless delivery making Unilever Purpose Led and Future Fit.
Purpose of the Role
The Manager - Secure Operations is accountable for ensuring the security, compliance, resilience, and operational effectiveness of Unilever's SAP landscape. The role leads the end-to-end governance of cyber security, vulnerability management, audit assurance, access governance, and risk management across SAP platforms and associated technologies.
The role acts as the primary interface between SAP Technical Services, Cyber Security, Platform Security, Infrastructure, Engineering, Internal Audit, and external partners to ensure the SAP estate remains secure, compliant, and audit-ready while enabling business continuity and operational excellence.
Main Accountabilities
Secure Operations & Cyber Security Governance
Lead SAP Secure Operations across the global SAP landscape and supporting technologies.
Ensure compliance with Unilever Cyber Security Standards, Policies, and Control Frameworks.
Define and drive security governance processes, standards, controls, and assurance activities.
Provide leadership and oversight for security-related operational activities across SAP platforms.
Vulnerability & Exposure Management
Own and govern vulnerability management processes across App, Infrastructure, Cloud, and supporting platforms.
Drive remediation of SAP Security Notes (HotNews), Qualys, Wiz, Guardium, and other cyber security findings.
Monitor vulnerability SLAs and ensure timely remediation through effective stakeholder engagement and governance.
Provide executive visibility of security posture, remediation progress, and residual risk.
Audit, Assurance & Compliance
Lead audit readiness and remediation activities for Corporate Audits, Operational Excellence Reviews, Penetration Tests, Internal Control Framework (ICF), and external assurance engagements.
Ensure closure of audit observations within agreed timelines.
Maintain evidence repositories and control effectiveness documentation to support audit and compliance requirements.
Drive continuous improvement initiatives based on audit outcomes and assurance reviews.
Cyber Risk Management
Govern cyber risk identification, assessment, mitigation, exception management, and risk acceptance activities.
Drive remediation plans for identified risks through enterprise governance processes.
Maintain visibility of risk posture and provide reporting to leadership forums.
Ensure appropriate governance for security exceptions and compensating controls.
Identity & Access Governance
Oversee Joiner-Mover-Leaver (JML) processes, privileged access governance, and periodic access reviews.
Ensure appropriate segregation of duties and access management controls.
Support compliance and regulatory requirements relating to access governance.
Performance &…