SAP GRC Specialist

SAP GRC Specialist, Location: Cracow, hybrid (3 days office, 2 days home office) 
Enterprise Technology, full time role, permanent position (contract of employment)

At Novocure, every role contributes to extending the lives of people living with cancer. As our new SAP GRC Specialist, you’ll play a key part in this mission. You will be responsible for ensuring compliance, control adherence, and audit readiness across our SAP S/4HANA and SAP CRM landscapes. As a subject matter expert in SAP Governance, Risk, and Compliance (GRC), with strong experience in regulatory compliance frameworks (e.g., SOX, GxP, FDA 21 CFR Part 11) and proven ability to partner with both IT and business stakeholders, you will own all audit-related requirements for the SAP ecosystem, ensuring the environment is secure, compliant, and always prepared for internal and external audits.

What You’ll Do 

• Manage and monitor SAP GRC Access Control modules (ARM, ARA, BRM, EAM) to enforce segregation of duties (SoD) and minimize risk.
• Ensure alignment of SAP roles and authorizations with internal control frameworks and regulatory requirements.
• Develop and maintain GRC rule sets specific to S/4HANA and SAP CRM environments.
• Serve as the primary owner of all audit deliverables related to SAP, including SOX testing, GxP validation, and ITGC controls.
• Act as the liaison between auditors (internal/external) and IT/business teams, ensuring evidence is complete, accurate, and timely.
• Lead audit readiness initiatives, proactively identifying gaps and implementing remediation plans.
• Conduct regular risk assessments and role redesign efforts to reduce SoD conflicts.
• Partner with BASIS and Security teams to ensure SAP security patches, upgrades, and system changes adhere to compliance requirements.
• Oversee SAP transport management from a compliance perspective, ensuring all changes follow defined ITGC and validation protocols.
• Validate compliance in the end-to-end change management process, including impact assessments and approvals.

About You 

To thrive in this role if you will need these essential qualifications. 

• 5+ years in SAP security, compliance, or GRC-focused roles, with direct experience in SAP S/4HANA and SAP CRM environments.
• Proven track record managing audit readiness and external audit engagements.
• Strong understanding of regulatory and compliance frameworks (e.g., SOX, FDA 21 CFR Part 11, GxP).
• Experience with SAP GRC Access Control (all core modules) required; knowledge of Process Control or Risk Management a plus.
• Excellent knowledge of segregation of duties (SoD) design and remediation.
• Strong analytical skills to assess risks, design mitigations, and recommend process improvements.

These additional qualifications are preferred 

• Familiarity with SAP BASIS, transport management, and integration with third-party applications.

• Outstanding communication skills for audit interactions and cross-functional collaboration.
• Ability to operate in a global environment, balancing compliance requirements with business agility.

• Experience with pharmaceutical, life sciences, or regulated industry environments.
• Knowledge of data privacy regulations such as GDPR, HIPAA, and data compliance frameworks
• Ability to travel domestically and internationally as needed for high priority projects

About us 

Novocure is a company with a powerful mission, to extend the lives of people living with some of the most aggressive forms of cancer. Here your work will have a direct impact on patients and those who care about them.  Join a team of passionate, collaborative people who support each other, challenge one another, and innovate together. Here, you’ll connect, grow, and make a real difference. We’re a company with the drive of a startup and the strength that comes with 25 years of success. 

Novocure operates at a rare crossroad, where advanced medical technology converges with cutting-edge biotechnology. We are the only company to develop and commercialize Tumor Treating Fields (TTFields), a proprietary, groundbreaking therapy designed to disrupt cancer cell division. With us you will find a unique combination of laboratory research work alongside engineering development of advanced technologies. This fusion of disciplines positions us as true pioneers in oncology innovation, leading a new frontier in the treatment of aggressive cancers. 

What We Offer 

The annual base salary ranges from 160 000 – 268 000 PLN gross per annum.

This pay range is the range of base pay compensation within which Novocure expects to pay for this role at the time of this posting. Individual compensation within this range depends on a variety of factors, including, but not limited to, prior education and experience, job-related knowledge and skills demonstrated. 

This job includes the following benefits:

• Performance related bonus
• Life Insurance
• Multisport card/Benefit system
• Private Medical care
•  ..and more!

Novoflex – our trust-based hybrid work philosophy 

We offer a flexible, trust-based hybrid working model for our office-based roles. Employees are asked to be in the office an average of three days per week, with the flexibility to choose which days work best for them. We understand that life is not always predictable, so if you need to adjust your schedule, such as leaving early, starting late, or working fewer days occasionally, we trust you to balance your time in a way that works for both you and Novocure. 

Ready to Apply? 

If you're excited about this role please apply. You might be just the person we’re looking for!