SAP Security & GRC Lead

Overview

The SAP Security & GRC Lead establishes and executes the enterprise SAP security strategy across SAP S/4 HANA, SAP GRC, Fiori, GTS, TM, BTP, Solution Manager, BW, and related platforms. The role leads security governance, compliance, risk management, Segregation of Duties (SoD), regulatory controls, and secure digital transformation across the SAP landscape.

What you'll do

• Establish and maintain the SAP Security and Controls strategy, roadmap, and governance framework.
• Define security standards, policies, and operating models for SAP platforms.
• Lead security initiatives supporting SAP S/4 HANA, Fiori, GTS, TM, BTP, cloud migrations, and enterprise transformation programs.
• Partner with enterprise cybersecurity leadership to align SAP security architecture with corporate security objectives.
• Own SAP Segregation of Duties (SoD) governance and risk management programs.
• Ensure compliance with SOX, IT General Controls (ITGCs), NIST, ISO 27001, and applicable regulatory requirements.
• Oversee SAP GRC Access Control, Emergency Access Management, and periodic user access reviews.
• Serve as primary SAP security contact for internal and external audits.
• Direct SAP authorization strategy across all SAP environments.
• Ensure appropriate design and maintenance of roles, profiles, and access models.
• Establish KPIs and control monitoring capabilities to measure effectiveness and compliance.
• Oversee remediation efforts related to audit findings, control deficiencies, and security risks.
• Lead and mentor SAP security analysts and architects.
• Manage system integrators, managed service providers, and consulting partners.
• Develop organizational capabilities and succession plans within the SAP security function.
• Manage budgets, resource planning, and vendor engagements.
• Collaborate with executive leadership, Internal Audit, Compliance, Risk Management, and business process owners.
• Communicate security risks, trends, and compliance posture to senior leadership.
• Provide strategic guidance on security implications of new SAP initiatives and business requirements.
• Lead security design for S/4 HANA upgrades, migrations, acquisitions, divestitures, and enhancements.
• Drive automation and modernization of access governance processes.
• Drive the adoption and governance of Artificial Intelligence (AI) and Generative AI capabilities within the SAP ecosystem, ensuring secure implementation, regulatory compliance, responsible use, and alignment with enterprise business objectives.
• Evaluate emerging SAP security technologies and cybersecurity trends.
• Champion continuous improvement initiatives that enhance both security and user experience.

What you'll need

• 10+ years of SAP Security and Governance experience.
• 5+ years of progressive leadership experience managing technical teams.
• Strong understanding of information security management principles, SAP application security implementation methodologies, and SAP user and role management tools (i.e., CUA and/or IDM).
• Deep expertise in SAP authorizations, SAP GRC, SoD, and compliance frameworks.
• Experience supporting SOX-regulated environments.
• Demonstrated experience leading the security effort in large SAP transformation programs.
• Good working experience with Microsoft Excel, Word, Visio, Project, and PowerPoint.
• Strong communication and interpersonal skills.
• Strong time management skills.
• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Accounting, or related field.
• Fluent in English.

Nice to have

• Experience in chemical manufacturing or mining industry.
• Knowledge of SAP Cloud Identity Services, IAS/IPS, and cloud security architectures.
• Professional certifications such as CISSP, CISM, SAP Security Certifications, CRISC, or CGEIT.
• Future-focused and willingness to embrace new SAP technologies.
• Familiar with an international and multi-cultural environment.
• Spanish, German, or Chinese would be beneficial but not required.

Details

• Location: Banglore, India.