Manager, SAP Security Controls & Governance

Summary: Overview : The Manager, SAP Security Controls & Governance serves as the technical lead for SAP security governance and ERP compliance controls within the IT Governance & Compliance organization. This role designs, administers, and continuously improves SAP security controls and SAP GRC capabilities, including Segregation of Duties (SoD), sensitive access, emergency access (Firefighter), role governance, and SAP GRC ruleset management. The Manager partners with SAP Security, ERP delivery teams, business process owners, Finance, Internal Audit, and external auditors to strengthen the SAP control environment, support SOX compliance, and drive governance automation and continuous monitoring capabilities.

SAP Security Governance & SAP GRC: Serve as the primary technical subject matter expert for SAP Security and SAP GRC Access Control. Lead governance activities supporting: Segregation of Duties (SoD) Sensitive Access Reviews Emergency Access Management (Firefighter) Privileged Access Governance User Access Reviews (UARs) Role Owner Reviews (RORs) Administer and maintain SAP GRC Access Control modules, including: Access Risk Analysis (ARA) Access Request Management (ARM) Emergency Access Management (EAM) Business Role Management (BRM) Maintain SAP GRC rulesets, risk libraries, mitigating controls, and access risk reporting. Partner with SAP Security teams to support role design, access provisioning, role optimization, and access risk remediation. Perform risk assessments related to SoD conflicts, sensitive access, privileged access, and Firefighter activity. Support governance activities across SAP ECC, SAP S/4HANA, SAP RISE, SAP Fiori, SAP BTP, and related SAP applications. Control Architecture & Compliance: Design, implement, and maintain SAP-focused IT General Controls (ITGCs) and compliance solutions supporting SOX requirements. Develop mitigating and compensating controls to address SAP security and access governance risks. Evaluate control effectiveness and recommend enhancements to strengthen the SAP control environment. Support SAP transformations, migrations, upgrades, and ERP modernization initiatives by ensuring appropriate governance and compliance requirements are implemented. Support audit and compliance activities by providing security risk analyses, evidence, reporting, and remediation support. GRC Tools & Technology Enablement: Configure, administer, and enhance SAP GRC and related governance technologies. Drive automation of User Access Reviews, SoD reviews, Firefighter monitoring, and compliance reporting. Develop dashboards, analytics, and reporting that improve visibility into access risks, control deficiencies, and remediation activities. Collaborate with technology partners and vendors to optimize governance tools and compliance processes. Evaluate emerging governance technologies, continuous controls monitoring capabilities, and automation opportunities. Continuous Improvement & Monitoring: Identify control gaps and recommend solutions to improve reliability, efficiency, and effectiveness. Support continuous controls monitoring and compliance reporting initiatives. Contribute to the development of governance policies, standards, procedures, and best practices. Drive improvements that enhance automation, risk visibility, and compliance execution. Stakeholder Collaboration: Work closely with IT, Finance, SAP Security, Internal Audit, and business stakeholders to support compliance and governance objectives. Provide technical guidance on SAP security controls, access governance, and risk mitigation strategies. Support control owners and system administrators in addressing control deficiencies and remediation activities.

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Computer Science, or a related field. 5+ years of experience supporting SAP Security, SAP GRC, access governance, or IT compliance programs.