file name = secret_data.txt
#contents of the file:
sys_pass=whatever

Your script:

#! /bin/ksh (or whatever shell)

#source the password file
. ./path_to/secret_data.txt
sqlplus -s username/$sys_pass@wherever as sysdba << END
...
END