SAP Security & GRC Lead

The SAP Security & GRC Lead will own the design, governance, and day-to-day operation of application security and GRC Access Control across the company's SAP landscape. This role leads a small, hands-on security team and is accountable for both business-as-usual (BAU) security support and the security workstream for new SAP rollouts and deployments.

What You Will Do

The SAP Security & GRC Lead will oversee daily user provisioning, role maintenance, access requests, and security incident resolution, monitor and report on elevated or sensitive access in production, and ensure consistent identity and access strategy across SAP and non-SAP applications.

Why It Might Be a Fit

The ideal candidate will have 10+ years of SAP security experience, including hands-on GRC Access Control and ECC/S/4HANA/Fiori security, and 2+ years leading security teams, contractors, or SI/AMS partners in a team-lead or supervisory role.

Requirements

• 10+ years of SAP security experience
• 2+ years leading security teams, contractors, or SI/AMS partners
• Participated in at least two SAP full-cycle implementations, rollouts, or major upgrade projects
• Thorough understanding of the SAP authorization concept and role-based access control
• In-depth knowledge of SoD governance, security rules, mitigating controls, and Firefighter/emergency access management
• Thorough understanding of SOX ITGC controls and experience supporting internal and external audits
• Knowledge of information security and IT risk management frameworks (e.g., NIST) and identity and access management tools and processes
• Ability to speak to infrastructure-level security concerns and work with technical teams to address them
• Excellent communication and stakeholder-management skills
• Strong analytical, problem-solving, and troubleshooting skills
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience
• Experience securing SAP BTP and related cloud services
• Experience with ServiceNow (or similar) integration with SAP GRC for access request management
• Experience automating provisioning and access review processes
• SAP Security and/or GRC training or certification

Benefits

• Base salary range of $100,000-130,000 per year
• Bonus opportunity 15%
• 401(k) plan / group retirement savings program
• Short-term and long-term disability benefits
• Life insurance
• Health, dental, and vision insurance
• Paid time off
• Paid holidays