Position Summary
We are seeking an experienced SAP Security & GRC Lead to oversee the design, implementation, governance, and support of SAP Security and SAP Governance, Risk, and Compliance (GRC) solutions across the enterprise. The ideal candidate will provide leadership in SAP authorization design, Segregation of Duties (SoD) compliance, role management, audit readiness, and security governance while ensuring alignment with organizational compliance and risk management objectives.
Key Responsibilities
• Lead the design, implementation, and maintenance of SAP security architecture across SAP landscapes.
• Define and enforce security standards, policies, and procedures.
• Ensure secure access management for SAP business applications and platforms.
• Review and approve security design, role concepts, and authorization strategies.
• Design and maintain SAP roles, profiles, and authorization objects.
• Lead role redesign and optimization initiatives.
• Establish role governance and access control processes.
• Conduct periodic user access reviews and remediation activities.
• Lead implementation and support of SAP GRC Access Control solutions.
• Manage Segregation of Duties (SoD) risk analysis and mitigation.
• Oversee Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).
• Develop and maintain SAP security governance frameworks.
• Collaborate with Internal Audit, Compliance, Cybersecurity, and Risk teams.
• Mentor and supervise SAP Security and GRC consultants.
• Review deliverables and ensure adherence to quality standards.
• Drive continuous improvement initiatives and best practices.
Required Qualifications
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or related discipline.
• 8+ years of SAP Security experience with at least 3 years in a lead role.
• Strong experience with SAP Security and Authorization concepts.
• Hands-on experience implementing and supporting SAP GRC Access Control.
• Deep understanding of Segregation of Duties (SoD) compliance and risk management.
• Experience supporting SAP ECC, SAP S/4HANA, and SAP SuccessFactors security.
• Strong knowledge of audit, compliance, and security governance frameworks.
• Excellent leadership, communication, and stakeholder management skills.