Manager, SAP Security and Controls

Clorox is the place that’s committed to growth – for our people and our brands. Guided by our purpose and values, and with people at the center of everything we do, we believe every one of us can make a positive impact on consumers, communities, and teammates. Join our team. #CloroxIsThePlace Your role at Clorox: The Manager, SAP Security & Controls is accountable for SAP Security, Governance, Risk & Compliance (GRC), Identity and Access Governance, and SAP SOX control effectiveness across the enterprise. This senior technical leadership role combines deep hands-on expertise with responsibility for security architecture, control assurance, service delivery, and the future SAP security roadmap. The successful candidate will set strategy and architecture, lead internal and managed service resources, and remain personally engaged in complex SAP Security, GRC, identity, authorization, and control issues. This role is suited to a leader who can move confidently between senior stakeholder discussions, audit and control decisions, solution design, and detailed technical troubleshooting. Success in this role means improving SAP control reliability and audit readiness, resolving complex security issues at their root cause, strengthening architecture and access governance, raising the quality and accountability of internal and managed service delivery, and advancing a practical future-state SAP security roadmap. The ideal candidate has personally delivered complex SAP Security and GRC solutions, can lead SOX control execution and remediation, and can shape strategy without losing the ability to work at technical depth.  In this role, you will: Own SAP SOX and ITGC control effectiveness: execute and oversee assigned controls, review evidence quality, provide formal sign-off, assess design and operating effectiveness, and drive sustainable remediation of deficiencies and repeat findings.   Remain hands-on: diagnose and resolve complex authorization, role design, GRC workflow, provisioning, Segregation of Duties, Firefighter, Fiori, cloud identity, and production security issues.   Lead SAP security architecture: define standards, role and authorization models, design principles, and a multi-year roadmap across ECC, S/4HANA, Fiori, BTP, GRC, IAG, IAS, IPS, and connected identity platforms.   Lead delivery and priorities: direct internal resources, contractors, managed service providers, and strategic partners; balance operational support, audit commitments, remediation, projects, and modernization initiatives.   Govern access and identity: lead access provisioning, User Access Reviews, Emergency Access Management, privileged access, role lifecycle, SoD rulesets, authentication, federation, and identity integration.   Influence across the organization: translate technical and control risks for senior leadership and partner effectively with Cybersecurity, IAM, Internal and External Audit, Enterprise Architecture, SAP delivery teams, and business stakeholders.  What we look for: 10+ years of progressive SAP Security, GRC, and Identity and Access Governance experience, including substantial experience as a senior architect or technical lead in a complex enterprise SAP environment.  Demonstrated hands-on SAP Security and GRC expertise combined with strategic, architectural, and delivery leadership.  Significant experience with S/4HANA security, role and authorization design, Fiori security, PFCG, SU24, and authorization troubleshooting and tracing.  Deep working knowledge of SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, MSMP workflows, BRF+, mitigating controls, and SoD ruleset governance.  Proven experience executing, reviewing, and remediating SAP SOX and ITGC controls and engaging with Internal and External Audit.  Experience applying modern SAP identity capabilities, including IAG, IAS, and IPS, within enterprise access