The posting
, Netherlands
Job Family Group:
Information Technology (IT)
Worker Type:
Regular
Posting Start Date:
November 3, 2026
Business Unit:
Information & Digital Technology
Experience Level:
Experienced Professionals
Job Description:
What’s the role
As a Senior ERP Risk & Control Advisor, you will provide specialist cyber, technology, and information risk advisory services across Shell’s ERP landscape and strategic transformation programs. You will lead risk assessments, influence secure-by-design control implementation, and leverage risk, audit, vulnerability, and operational insights to identify and address material risks across ERP environments.
Working closely with the BISO organization, ERP leadership, architects, product teams, and CISO specialists, you will enable informed, evidence-based risk decisions while promoting effective governance, standardized controls, and sustainable remediation. Your work will strengthen the security, resilience, integrity, and compliance of Shell’s ERP ecosystem.
The role sits within the Enterprise Risk Services (ERS) Governance, Risk & Compliance (GRC) team, providing strategic risk advisory support across ERP platforms, enterprise applications, cloud technologies, and digital transformation initiatives. Combining deep ERP expertise with cyber risk and governance capabilities, you will help business and technology leaders make risk-based decisions aligned with Shell’s security and control frameworks.
What you’ll be doing
- Serve as the primary Cyber and Information Risk Advisor across Shell’s ERP landscape and strategic transformation initiatives.
- Build trusted partnerships with business leaders, product owners, architects, engineers, and program teams to embed risk-based decision-making.
- Provide specialist advisory support across SAP S/4HANA, SAP ECC, SAP BTP, SAP Fiori, SAP GRC, Workday, enterprise integration platforms, and cloud-hosted ERP solutions.
- Lead Information Risk Assessments (IRAs), DPIAs, security architecture reviews, control assurance activities, and supplier security assessments.
- Identify, assess, and manage cyber, technology, and information risks, ensuring alignment with Shell’s risk appetite and regulatory obligations.
- Advise stakeholders on risk treatment, mitigation, acceptance decisions, and sustainable remediation strategies.
- Drive the implementation of security standards, policies, and control requirements across projects, products, and operational environments.
- Review ERP and enterprise application risk exposure using KRIs, audit findings, vulnerability data, compliance metrics, and control performance indicators.
- Assess and advise on key ERP risk domains, including Segregation of Duties (SoD), Identity & Access Management, Privileged Access Management, Change Management, Application Security, Data Protection, Third-Party Integrations, and Business Continuity & Disaster Recovery.
- Support major transformation programs involving cloud adoption, ERP modernization, digitalization, AI-enabled capabilities, and third-party integrations.
- Review architectures, integrations, APIs, middleware, and data flows to identify security and compliance risks and opportunities for control automation.
- Influence governance outcomes through active participation in architecture review boards, risk committees, and project steering forums.
- Present risk insights and recommendations to senior business and technology leaders, challenging stakeholders where required to improve control effectiveness and security outcomes.
- Partner with BISO, CISO, Enterprise Architecture, Business IDT, SOM, and operational teams to manage the ERP risk landscape and continuously enhance governance, controls, and compliance processes.
- Interpret and apply relevant regulatory and industry requirements, including GDPR, NIS2, data privacy obligations, and cybersecurity standards.
- Reports to the Risk & Control Manager – ERP within the Governance, Risk & Compliance function, with a dotted-line relationship to the BISO organization.
- Acts as a core member of the BISO Natural Team and key ERP risk leadership forums.
What you bring
- Strong expertise in SAP security, ERP controls, and technology risk management, with a solid understanding of governance, risk, and compliance (GRC) principles.
- Deep knowledge of ERP platforms and enterprise application security, with the ability to bridge cybersecurity, technology, and business objectives.
- Proven ability to provide pragmatic, risk-based advice that enables secure-by-design outcomes across complex ERP and digital transformation programs.
- Demonstrated success influencing, challenging, and partnering with senior business and technology leaders on risk, control, and security decisions.
- Strong stakeholder management, communication, and relationship-building skills, with the ability to operate effectively across technical and non-technical audiences.
- Ability to translate complex cyber, technology, and ERP risks into clear business impacts and actionable recommendations for leadership.
- Experience leading risk assessments, governance activities, and control assurance within large-scale ERP transformation, cloud migration, or enterprise modernization initiatives.
- Strong analytical and problem-solving skills, with the ability to prioritize risks and drive sustainable remediation in complex environments.
- Knowledge of regulatory, privacy, and cybersecurity frameworks, including GDPR, NIS2, ISO 27001, and other industry-recognized standards.
- Professional certifications such as CISSP, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor, SAP Security, or SAP GRC certifications are preferred.
IMPORTANT NOTE: After you submit your application, you will receive an email providing a link to an online assessment that is a mandatory part of the process. The email will come from HireVue - please check your spam/junk mailbox if you do not see the email. Once completed, your application will be reviewed to determine next steps. Thank you for your interest in Shell.
What we offer
You bring your skills and experience to Shell and in return you work with talented, committed people on one of the most important challenges facing our planet. You’ll have the opportunity to develop the skills you need to grow in an environment where we value honesty, integrity, and respect for one another. You’ll be able to balance your priorities as you become the best version of yourself.
- Progress as a person as we work on the energy transition together.
- Continuously grow the transferable skills you need to get ahead.
- Work at the forefront of technology, trends, and practices.
- Collaborate with experienced colleagues with unique expertise.
- Achieve your balance in a values-led culture that encourages you to be the best version of yourself.
- Benefit from flexible working hours, and the possibility of remote/mobile working.
- Perform at your best with a competitive starting salary and annual performance related salary increase – our pay and benefits packages are considered to be among the best in the world.
- Take advantage of paid parental leave, including for non-birthing parents.
- Join an organisation working to become one of the most diverse and inclusive in the world. We strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply.
- Grow as you progress through diverse career opportunities in national and international teams.
- Gain access to a wide range of training and development programmes.
We'd like you to know that Shell has a bold goal: to become one of the world’s most diverse and inclusive companies. You can get to know more about how we're working towards that goal, click here.
Shell in The Netherlands
The Netherlands is one of the two founding countries of the company. Here 9,380 employees (March 2024) of more than 100 nationalities jointly work to provide the country with energy for today, for tomorrow and for you.
Energy for today
The refinery at Shell Energy and Chemicals Park Rotterdam (Pernis) - Europe’s largest - is facing a cleaner future with less carbon emissions. Chemicals Park Moerdijk is transitioning to a circular future. Shell operates multiple wind and solar farms in the Netherlands. Both onshore and offshore, Shell is exploring for and producing oil and gas via the Nederlandsche Aardolie Maatschappij, NAM (50% Shell, 50% ExxonMobil). Shell is the market leader in transport fuels. Dutch motorists take 3 billion litres of fuel from 570 Shell retail stations (May 2024) annually, while thousands of Shell's own fast EV charge points and Shell Ubitricity normal charge points are being installed as we speak.
Energy for tomorrow
At the Energy Transition Campus Amsterdam (ETCA), research is conducted into low CO2 energy technologies and sustainable solutions for energy and chemicals. Near Rotterdam Shell builds Europe's biggest green hydrogen plant of the continent. From Amsterdam and The Hague, Shell Nederland leads the transition of the corporation to a more sustainable future, with 6.5 billion euros invested in solar panels, wind farms, green hydrogen, sustainable aviation fuel, EV charging and other groundbreaking solutions for the future.
Energy for you
Even after the company HQ moved to London in January 2022, Shell's commitment to the Netherlands remains very strong. The Hague still housing the headquarters of three of Shell's business divisions, and Rotterdam stays a key trading, marketing and sales hub for Shell products. Combined Shell in the Netherlands works to bring its wide range of energy products as close as possible to you as an energy consumer. This includes a Shell Impact Fund to make the energy transition closer to people with financial challenges, this includes EV chargers on the corner of your street via our daughter company Ubitricity and this includes keeping the country warm in winter with Liquid Natural Gas.
-
DISCLAIMER:
Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date. Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Shell/Shell Group companies around the world. The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand. Shell is an Equal Opportunity Employer.
