This position requires access to customer data; must be a U.S. citizen. SAP NS2 does not offer Visa sponsorships for this role. All internal must have manager's approval to transfer.Job DescriptionWhat you'll bringYou have deep expertise in compliance strategy, audit leadership, and security governance at scale. Strong experience in cloud security, Zero Trust principles, IAM, and regulatory alignment is essential, and the ability to define frameworks, influence stakeholders, and advance enterprise-wide compliance maturity is critical. You've led audits end to end, mentored compliance professionals, and shaped how organizations interpret and meet security framework requirements.
What you'll build You'll lead compliance programs and define enterprise control frameworks aligned with standards such as ISO 27001, NIST, and applicable regulatory requirements. Continuous compliance capabilities, including automated monitoring, risk scoring, and policy enforcement, are yours to establish and maintain. Cloud and AI governance, including model risk management, data privacy, and security controls, falls within your responsibility. You'll oversee audit planning and execution, guide remediation efforts, and mentor compliance professionals across the team.
Where you belong You'll provide leadership across teams, shaping how compliance programs are designed and executed at SAP NS2. The work requires both deep subject matter expertise and the ability to influence people across organizational lines without always having direct authority. Fostering a culture of security, governance, and accountability is part of how success is measured at this level. If you've led compliance programs at enterprise scale and you're looking for broader organizational impact, this is the right fit.
QualificationsQualifications:- In-depth knowledge and understanding of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks. This includes, but not limited to, FedRAMP, CMMC, ISO, RMF, and SOC frameworks, DISA policies and NIST security special publications.
- Ability to communicate, both orally and in writing at the senior level.
- Shape executive briefings and decision materials for the SAP NS2 Board, Executive Leadership, Government Leaders and line of business reviews.
- Experience with Department of Defense / War, US Federal Agencies and Intelligence community cyber security practices.
- Ability to understand technical challenges and translate risk and complexity into clear business decisions for senior leaders, customers, and non-technical stakeholders.
- Ability to engage with customers, understanding and addressing their security and compliance needs; and as needed coordinate with internal experts to help shape practical solutions and build trust.
- Review of customer contracts for compliance with security offerings and requirements.
- CISSP or other professional security certification.
Additional InformationAll your information will be kept confidential according to EEO guidelines.
Compensation Range Transparency
SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.
AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.
