Senior Manager – Access Governance (m/f/d)

About the role

Fresenius Kabi is looking for a Senior Manager Access Governance to join its internal IT Compliance & Risk Management team in Barcelona. The role ensures that access across business-critical applications, identity systems and SAP environments is secure, compliant and fully auditable, combining enterprise access governance with SAP authorization governance in a regulated setting. It works closely with IT, information security, risk, compliance and business functions.

Key responsibilities

• Develop and maintain the enterprise access governance framework, covering policies, standards, role design principles, approval rules and access lifecycle controls.
• Manage access consistently across its lifecycle: requests, approvals, provisioning, user lifecycle, recertification, privileged and emergency access, segregation of duties (SoD), mitigation controls and remediation tracking.
• Oversee SAP authorization governance across SAP ECC, SAP S/4HANA and related landscapes, including SAP GRC access control, access risk analysis, access request and emergency access management, business role management and SoD risk management.
• Assess complex or high-risk access situations against least privilege, need-to-know, traceability, auditability and segregation of duties, and coordinate periodic access, role, privileged access and mitigation control reviews.
• Support internal and external audits with governance documentation and evidence, and train role owners, application owners, approvers and other stakeholders.
• Collaborate with identity and access management, information security, IT operations, SAP, risk, controls, audit, validation, quality, legal, privacy and compliance, and with business stakeholders and external partners.
• Improve and automate recurring access governance activities and report on access risks, compliance metrics, control effectiveness, remediation progress and audit readiness.

Required profile

• Master's degree or equivalent in IT/CS, BA or similar.
• Several years of experience in identity and access management, access governance, IT compliance or audit, internal controls, SAP Security, SAP authorization governance or SAP GRC, including regulated environments and audit-ready evidence.
• Expertise in role-based access control, user lifecycle management, privileged access, SoD, access reviews and role design.
• Strong communication, presentation, leadership and analytical skills, with sound judgment and ownership.

Required skills

• SAP authorization concepts, SAP ECC, SAP S/4HANA, complex SAP landscapes and SAP GRC Access Control (essential).
• IT general controls, information security, internal control frameworks and risk and compliance management.
• Nice to have: CISA, CISM, CISSP, CRISC, SAP or identity governance certifications; regulated industry experience (life sciences, pharma, healthcare, medical devices) with GxP, 21 CFR Part 11, EU GMP Annex 11, SOX-like controls or GDPR; identity governance, privileged access and workflow tools such as SailPoint, Microsoft Entra ID, Saviynt, ServiceNow, CyberArk, SAP Fiori, SAP HANA authorizations and SAP Cloud IAG.