Roche Posted September 8, 2026

ERP Solution Architect Process & Access Control

Madrid, Spain FULL_TIME
Notify me about similar jobs

Roche is the source of truth for this posting and owns the application process. We surface normalized context and market comparison you won't find on the original listing.

About this opportunity

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections,  where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

The Solution Architect focuses on maximizing product and system value by designing, governing, and delivering business-driven, standards-based, and future-ready architectures within a complex, multiple solution context. In this role, you will ensure that architectural designs align with business priorities and enterprise standards while balancing functional requirements with non-functional requirements (NFRs). You will maintain the architectural vision and roadmap, collaborate closely with engineering and product teams, and continuously improve the ecosystem through technical innovation, risk mitigation, and robust governance.

The Opportunity

Architecture and Governance for ERP Process, Access, and Security Controls. Lead the architectural lifecycle management of SAP GRC Platform. The mission is to design a robust, scalable control environment that secures sensitive data, minimizes technical debt, and streamlines audit readiness. This role ensures that architectural patterns and security controls are consistently applied across the SAP ERP landscape to meet strict compliance requirements for GxP, Internal Control over Financial Reporting (ICFR), and Data Privacy & Protection.

Scope / (Content Leadership): Defines and owns the architectural blueprint and reference patterns to ensure delivery of solutions that meet business priorities and enterprise standards. Ensures Non-Functional Requirements (NFRs), such as scalability, performance, and security, are baked into the core design. Collaborates with product management and engineering teams to align technical evolution with enterprise governance.

Accountability / Problem Solving: Leads architecture-related problem solving for complex security and compliance challenges using data, threat modeling, and stakeholder input. Maintains the technical vision, architectural roadmap, and guardrails. Assesses the architectural impacts, dependencies, and risks of new initiatives across the broader application landscape.

Stakeholder Management: Engages and aligns stakeholders across business, security, and IT. Communicates complex technical concepts, trade-offs, and architectural decisions clearly to both technical and non-technical audiences.

Impact / Strategy: Defines and maintains the technical and integration roadmap aligned with the overarching business strategy. Reviews and guides feature implementation to maximize value delivery while ensuring long-term system sustainability. Continuously improves the architectural landscape and supports the secure adoption of new capabilities.

Complexity / (Product Size): Operates within a Complex, Multi-Instance, or Multiple Solution and Product Context.

Business / Technical Ability: Applies expert-level functional and technical understanding of SAP security architectures to drive design decisions and collaborates deeply with engineering and development teams to guide implementation.

Who you are

Deep understanding of SAP GRC Process & Access Control architecture and how they integrate seamlessly with complex ERP systems.

Strong background in IT Service Management / ITIL to manage service delivery and system integrity.

Very good understanding of ERP specific compliance requirements, incl. Computerized System Validation (CSV), ICFR, Data Protection/Privacy

Education / Experience

Demonstrated experience leading technical teams in designing business-driven, standards-based, future-ready architectures within a complex or multiple solution/product context.

Experience maintaining the technical vision, architectural roadmap, and current state documentation for multiple enterprise solutions, including assessing the impact of initiatives on capabilities, risk, and application landscapes.

Proven track record of proactively contributing to the development of enterprise architecture practices, establishing design patterns, and mentoring engineering teams.

Technical Skills

In-depth and expert-level knowledge in multiple security, compliance, and SAP technology areas.

Proficiency in creating Conceptual & Logical Data Models, Taxonomies, Ontologies, and highly secure Integration Pathways for enterprise products.

Ability to define, document, and drive Reference Architectures, Design Patterns, NFRs, and fitness functions.

Strong capability to evaluate external technology trends, assess feasibility for multiple interconnected solutions, and conduct rigorous technical vendor assessments.

Additional Qualifications

Exceptional communication and negotiation skills, with the ability to articulate difficult technical concepts and influence diverse stakeholders to adopt alternative architectural perspectives.

Proactive mindset to identify opportunities to enhance security value, improve existing architectures, aggressively manage technical debt, and lead teams in identifying innovative, compliant solutions.

Ready to take the next step? We'd love to hear from you. Apply now to explore this exciting opportunity!

 

 

Where pay transparency applies, details are provided based on the primary posting location. For this role, the primary location is Madrid. If you are interested in additional locations where the role may be available, we will provide the relevant compensation details later in the hiring process.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

Job details

Seniority
Not listed
Function
Information Technology
Therapeutic area
Not listed
Location
Madrid, Spain
Employment type
FULL_TIME

How this role compares

Computed from every other active Information Technology role in our database, not just this employer's listings.

We currently track 1167 comparable Information Technology roles across 74 biopharma companies.

1167Comparable roles tracked
1083Currently active
74Companies hiring similar roles
35Countries represented

Salary context

162 of 1167 peers report a salary range (USD, annualized)

Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.

This roleSubject Not listed on this posting
Lowest disclosed · 2027 Business Technology Solutions Intern - Cybersecurity (Undergraduate) · AbbVie $21/hr – $37/hr (≈ $43,680–$76,960/yr)
Peer group range $60,320 – $400,000 (median $185,000)

Where these roles are based

Top locations among the 1167 comparable roles

India488
United States310
Spain89
Poland71
Portugal22
China17

+ 29 more countries

Seniority mix

667 of 1167 peers have a known seniority level

Senior272
Manager143
Principal67
Associate Director55
Associate49
Director41
Intern/Fellow/Postdoc21
Senior Director13
Executive/VP6

Therapeutic area mix

2 of 1167 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden

Oncology1
Vaccines & Infectious Disease1

Similar opportunities

The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.

40%similar
Roche Sant Cugat del Vallès, Barcelona, Spain
Same function Same country
40%similar
Novartis Barcelona Gran Vía, Spain
Same function Same country
40%similar
Roche Madrid, Spain Manager
Same function Same country
40%similar
Roche Madrid, Spain Senior
Same function Same country
40%similar
Roche Madrid, Spain
Same function Same country
40%similar
Roche Madrid, Spain Senior
Same function Same country

Notify me about similar jobs

Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.

How we calculate "similar"

No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.

Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.

40%
Lead Software Engineer (Rust)
Roche · Sant Cugat del Vallès, Barcelona, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Senior SAP Cloud Engineer
Roche · Madrid, Spain · Senior
Function Therapeutic area Seniority Country
40%
IT Business Analyst - Omnichannel Orchestration - RDT Global Products & GPS
Roche · Madrid, Spain · Seniority not listed
Function Therapeutic area Seniority Country
40%
Domain Architect - Site & Services
Roche · Madrid, Spain · Seniority not listed
Function Therapeutic area Seniority Country
Unmatched or unknown dimensions score exactly the same: 0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.