This position requires access to customer data; must be a U.S. citizen. SAP NS2 does not offer Visa sponsorships for this role. All internal must have manager's approval to transfer.Job DescriptionWhat you'll bringYou have deep expertise in compliance strategy, audit leadership, and security governance at scale. Strong experience in cloud security, Zero Trust principles, IAM, and regulatory alignment is essential, and the ability to define frameworks, influence stakeholders, and advance enterprise-wide compliance maturity is critical. You've led audits end to end, mentored compliance professionals, and shaped how organizations interpret and meet security framework requirements.
What you'll build You'll lead compliance programs and define enterprise control frameworks aligned with standards such as ISO 27001, NIST, and applicable regulatory requirements. Continuous compliance capabilities, including automated monitoring, risk scoring, and policy enforcement, are yours to establish and maintain. Cloud and AI governance, including model risk management, data privacy, and security controls, falls within your responsibility. You'll oversee audit planning and execution, guide remediation efforts, and mentor compliance professionals across the team.
Where you belong You'll provide leadership across teams, shaping how compliance programs are designed and executed at SAP NS2. The work requires both deep subject matter expertise and the ability to influence people across organizational lines without always having direct authority. Fostering a culture of security, governance, and accountability is part of how success is measured at this level. If you've led compliance programs at enterprise scale and you're looking for broader organizational impact, this is the right fit.
Qualifications- In-depth knowledge and understanding of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks. This includes, but not limited to, FedRAMP, CMMC, ISO, RMF, and SOC frameworks, DISA policies and NIST security special publications.
- Ability to communicate, both orally and in writing at the senior level.
- Shape executive briefings and decision materials for the SAP NS2 Board, Executive Leadership, Government Leaders and line of business reviews.
- Experience with Department of Defense / War, US Federal Agencies and Intelligence community cyber security practices.
- Ability to understand technical challenges and translate risk and complexity into clear business decisions for senior leaders, customers, and non-technical stakeholders.
- Ability to engage with customers, understanding and addressing their security and compliance needs; and as needed coordinate with internal experts to help shape practical solutions and build trust.
- Review of customer contracts for compliance with security offerings and requirements.
- CISSP or other professional security certification.
Additional InformationAll your information will be kept confidential according to EEO guidelines.
