ERP Solution Architect - Process & Access Control

About the role

Roche is looking for an ERP Solution Architect focused on process, access and security controls in Madrid. The role leads the architectural lifecycle of the SAP GRC platform, designing a robust, scalable control environment that secures sensitive data, reduces technical debt and improves audit readiness. It applies architectural patterns and security controls consistently across the SAP ERP landscape to meet GxP, ICFR and data privacy compliance.

Key responsibilities

• Define and own the architectural blueprint and reference patterns, embedding scalability, performance and security as non-functional requirements.
• Lead architecture problem solving for complex security and compliance challenges using data, threat modeling and stakeholder input, and maintain the architectural roadmap and guardrails.
• Assess the impact, dependencies and risks of new initiatives across the application landscape.
• Engage business, security and IT stakeholders and explain technical trade-offs to technical and non-technical audiences.
• Maintain the technical and integration roadmap, review feature implementations and support the secure adoption of new capabilities.
• Work with engineering and product teams to align technical evolution with enterprise governance.

Required profile

• Expert-level understanding of SAP GRC Process & Access Control and its integration with complex ERP systems.
• Strong background in IT Service Management / ITIL.
• Very good understanding of ERP compliance requirements such as CSV, ICFR and data protection.
• Experience leading technical teams in designing standards-based architectures in a multi-solution context, and maintaining architectural roadmaps and documentation.
• Proven contribution to enterprise architecture practices, design patterns and mentoring engineering teams.

Required skills

• Conceptual and logical data models, taxonomies, ontologies and secure integration pathways.
• Defining and documenting reference architectures, design patterns, NFRs and fitness functions.
• Evaluating external technology trends and conducting technical vendor assessments.
• Exceptional communication and negotiation skills.