Senior Security Engineer, ITC

Overview

Senior SAP Application Security Engineer in Nike's ITC team, leading the execution of an application security strategy and engineering best practice tasks for SAP security.

What you'll do

• Create, adopt, and execute a strategic plan to align SAP Security with industry best practices and SOX compliance.
• Manage a master service partner team to successfully execute large initiatives and smaller ongoing support projects, and help implement and operate security controls.
• Build strong relationships with a variety of third-party providers to deliver the tools and skills needed to fulfill the application security strategy.
• Coordinate and lead system redesign and upgrade/patching activities for the application security team.
• Develop and operate application security services relevant for applications.

What you'll need

• Bachelor's in Computer Science or a related field.
• 6+ years of experience in SAP Security projects, with at least 2 full cycle implementations.
• 2+ years of experience with SAP GRC Access Control 10.x/12.0 implementation and configuration, designing segregation of duties (SOD) risks, and remediating identified violations.
• 2+ years of experience with implementation and support of IT controls on SAP GRC reporting and user access environments.
• Experience with ITGC audit and compliance cycles and requirements.
• Strong understanding of large-scale information technology systems.
• Experience delivering enterprise quality application security solutions.
• Demonstrated blend of strategic, execution, and operational success leading application security in a world class, global, high transaction environment.
• Familiarity with application logging/security reporting, application vulnerability testing, and code reviews.
• Strong interpersonal communication skills with a proven track record of collaboration and influence across a diverse audience of business and technical team members.

Nice to have

• Experience with implementing SAP GRC Process Controls.
• CISSP certification.
• SAP Security Certification.