Senior / 15+ years SAP security experience.

Position Summary

IBM Consulting is seeking an experienced SAP S/4HANA Security & GRC Consultant to lead the SAP Security & Controls workstream on the Industrial Account Project Skyline program, a complex manufacturing transformation. The consultant will bring deep expertise in SAP security, SAP GRC, identity and access management, and enterprise controls, combined with hands-on delivery leadership. This individual will work directly with PMO and business workstream leads, advise senior client stakeholders on security and controls decisions, and lead a blended onshore/offshore delivery team to build a secure, compliant, and audit-ready SAP landscape.

Key Responsibilities

Executive Advisory & Client Leadership
• Partner with PMO leadership and business workstream leads to align SAP security design, controls, and delivery plans with overall program priorities.
• dvise senior executives on SAP security architecture, enterprise controls, regulatory compliance, access risk, and cyber risk considerations.
• Deliver executive-ready recommendations, roadmaps, status updates, and risk assessments that translate technical access and control issues into actionable business decisions.
• Build and maintain senior client relationships that reinforce IBM's position as a trusted partner for SAP security and controls transformation.
• Prepare high-impact PowerPoint materials for steering committees, leadership discussions, and risk reviews, while maintaining program tools including ADO, JIRA, and Smartsheet.

SAP Security & GRC Delivery
• Lead the SAP Security workstream across a complex, multi-tenant program, ensuring delivery aligns with project objectives, timelines, and governance expectations.
• Hands-on, design and lead end-to-end SAP Security and GRC solutions across on-premises, cloud, and hybrid landscapes.
• Hands-on direct SAP role design, Fiori authorization design, access governance, user provisioning/de-provisioning, privileged access management, and least-privilege access models.
• Hands On SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, and user access reviews.
• Provide expertise in SAP Identity Access Governance (IAG) bridge authentication with SAP GRC, and guide Okta integration for SAP authentication and identity lifecycle management.
• Drive SoD risk analysis, remediation, mitigation control design, audit readiness, and sustainable access governance models, applying business process knowledge to align access design with manufacturing operations.
• pply AI-enabled methods to develop practical solution options and recommendations within short timelines.

SAP Cloud, SaaS & Platform Security
• Lead SAP cloud and SaaS security across S/4HANA and related SAP cloud services.
• Define practical controls and governance for SAP cloud platforms, including ownership, risk treatment, and audit evidence requirements.
• Enable secure cloud adoption by aligning identity, authorization, provisioning, monitoring, and compliance requirements across SAP and connected applications.

Program Delivery & People Leadership
• Manage security delivery across a complex system environment spanning multiple stakeholder groups, workstreams, and integration points.
• Manage global delivery resources, including offshore teams, with clear accountability for workstream outcomes, quality, and timelines.
• Mentor team members and contribute to building a high-performing, audit-ready delivery capability.

Required Qualifications
• Bachelor's degree in information systems, computer science, cybersecurity, business, engineering, or a related discipline.
• 15+ years of SAP security implementation experience, including at least five full SAP implementation lifecycles.
• 5+ years leading SAP Security workstreams in complex, multi-tenant project environments.
• 5+ years managing delivery resources, including offshore teams.
• Experience managing complex system landscapes spanning multiple applications, integrations, stakeholders, and governance requirements.
• S/4HANA experience in manufacturing environments, including 3+ years of industry experience.
• 3+ years of experience with SAP GRC Access Control.
• Experience with SAP IAG bridge authentication and SAP GRC integration.
• Experience integrating Okta for authentication and identity lifecycle management.
• Strong business process knowledge with the ability to present recommendations to senior executives.
• dvanced Microsoft Tools , SharePoint, JIRA, Azure DevOps skills, with the ability to produce executive-ready materials.
• bility to apply AI-enabled methods to develop timely solution options and recommendations.
• bility to travel weekly and work onsite in Northern New Jersey, Monday 11:00 AM ET through Thursday 3:00 PM ET.

Preferred Qualifications
• Hands-on delivery or leadership experience in three or more of the following: SAP IBP, SAP Ariba, SAP Analytics Cloud (SAC), SAP BTP Cockpit, SAP SLS, SAP Build Application Studio (Client), and SAP Work Zone.
• Master's degree or MBA.
• SAP certifications such as SAP Security, SAP GRC, SAP S/4HANA, SAP Cloud Security, or SAP BTP.
• Familiarity with modern identity and access governance platforms and controls automation.
• Experience in regulated or audit-intensive manufacturing environments.