Job
In this role, you ensure secure and compliant access governance in ERP systems by managing access requests, granting permissions, and identifying Segregation of Duties risks.
Job summary
This listing has been machine translated. Show original
Your role in the team
- We are looking for an Application Access Governance Specialist - ERP Systems to strengthen user access governance across our ERP and business application landscape.
- In this role, you will help ensure that access is requested, approved, provisioned, reviewed, and removed in a secure, compliant, and user-friendly way.
- Experience with Infor M3 Cloud is valuable, but not mandatory from day one.
- You will work closely with business stakeholders, IT Application Security, application teams, role owners, and internal control stakeholders to support secure and compliant business operations.
- You will have the chance to shape and improve access workflows, strengthen audit readiness, and build expertise in Infor M3 Cloud and related satellite applications such as EAM, GHR, LMS, Optiva, and other future application scope.
- You will act as the central specialist for application-level user access administration and access governance across ERP and business applications.
- Your focus will be to translate business access needs into compliant, practical, and auditable access decisions.
- You will review access requests, identify potential Segregation of Duties risks, challenge non-compliant requests professionally, and ensure that access decisions are properly documented.
- Over time, you will also help improve and standardise the access governance model, including workflows, documentation, reviews, and opportunities for automation.
- Own application-level user access administration for ERP and business applications, ensuring users receive access based on approved business roles and requirements.
- Develop strong knowledge of the Infor M3 Cloud access model and apply it to user administration, role assignment, and access governance activities.
- Collaborate with line managers, role owners, IT Security, application teams, and internal control stakeholders to understand access needs and define compliant solutions.
- Maintain user setup, profiles, role assignments, and access permissions in line with role models, least-privilege principles, and business requirements.
- Troubleshoot and resolve access-related issues while maintaining governance standards and minimising disruption to business operations.
- Design, maintain, and improve the end-to-end user access workflow, covering request, approval, provisioning, review, and removal.
- Review incoming access requests against Segregation of Duties rules, challenge or reject non-compliant requests, and maintain a clear audit trail.
- Conduct regular user access reviews, audits, and validations, documenting results and following up on findings.
- Work with role owners and managers to remediate incorrect or risky access and ensure access remains aligned with business responsibilities.
- Support future access administration scope for satellite applications such as EAM, GHR, LMS, Optiva, and other applications introduced through business growth or future go-lives.
Our expectations of you
Qualifications
- Strong understanding of role-based access control (RBAC) and how it applies within ERP or enterprise application environments.
- Good knowledge of access governance principles, including Segregation of Duties, least privilege, access reviews, audit trails, and compliant access provisioning.
- Ability to read, interpret, and apply security policies in a practical and business-oriented way.
- Strong documentation skills, including the ability to maintain procedures, audit logs, evidence records, and decision trails.
- Process-oriented mindset with a strong focus on standardisation, continuous improvement, and operational reliability.
- Strong communication and interpersonal skills, with the confidence to work independently in a matrix environment and professionally challenge non-compliant access requests.
- Willingness and ability to develop deep expertise in Infor M3 Cloud access administration and related application governance processes.
- A strong command of spoken and written English is required; knowledge of German is considered an advantage.
- Vertrautheit mit einer oder mehreren Infor Satellitenanwendungen wie EAM, GHR, LMS, Optiva oder ähnlichen Business-Anwendungen.
- Understanding of identity governance, IAM, or access lifecycle processes beyond ERP application administration.
Experience
- Experience in user access administration, application access governance, ERP security, or internal controls within a business application environment.
- Experience working with internal controls, audit requirements, or SOX-compliant processes.
- Hands-on experience with Infor M3 Cloud user administration, including user setup, role assignment, profile maintenance, and access permissions.
- Experience with Infor GRC or similar governance, risk, and compliance tooling.
- Experience supporting automated access reviews, user certification workflows, or evidence collection for audits.
- Experience contributing to role redesign, Segregation of Duties remediation, or access governance improvement initiatives.
- Previous experience in a global FMCG, manufacturing, or multi-entity organisation with complex business application landscapes.
What we offer
- This role gives you the opportunity to take ownership of a critical access governance function in a global IT environment.
- Important: Please note that a valid work and residence permit is required for non-EU applicants for this position.
Topics you will work on
Job locations
About your employer
Wir sind stolz darauf, der führende Hersteller im Bereich salziges Knabbergebäck zu sein. Mit unseren vier Produktionsstandorten in Deutschland (Alsbach, Petersau, Wevelinghoven und Krieschow) und unserer Zentrale in Köln vertreiben wir bekannte Marken wie funny-frisch, Chio und POM-BÄR und beschäftigen ca. 1.500 Mitarbeiter.
- Established Company
- Onsite, Hybrid
- Industry, Production
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
You’ll be joining at a stage where we’re building and evolving our new CRM platform. That’s exactly what makes this role special: you won’t just develop features—you’ll actively help shape the technical foundation of a modern CRM ecosystem. Together...