SAP Security & GRC Lead

Be an essential element to a brighter future. 

We work together to transform essential resources into critical ingredients for mobility, energy, connectivity and health. Join our values-led organization committed to building a more resilient world with people and planet in mind. Our core values are the foundation that make us successful for ourselves, our customers and the planet. 

The role of SAP Security Lead is responsible for establishing and executing the enterprise SAP security strategy across SAP S/4 HANA, SAP GRC, Fiori, GTS, TM, BTP, Solution Manager, BW, and related platforms. This role provides leadership over security governance, compliance, risk management, Segregation of Duties (SoD), and regulatory controls while ensuring alignment with enterprise cybersecurity objectives and business transformation initiatives. The position serves as a strategic advisor to executive leadership and business stakeholders, driving secure digital transformation and maintaining a robust control environment across the SAP landscape. 

Key Responsibilities 

Strategic Leadership 

• Establish and maintain the SAP Security and Controls strategy, roadmap, and governance framework. 

• Define security standards, policies, and operating models for SAP platforms. 

• Lead security initiatives supporting SAP S/4 HANA, Fiori, GTS, TM, BTP, cloud migrations, and enterprise transformation programs. 

• Partner with enterprise cybersecurity leadership to align SAP security architecture with corporate security objectives. 

Governance, Risk & Compliance 

• Own SAP Segregation of Duties (SoD) governance and risk management programs. 

• Ensure compliance with SOX, IT General Controls (ITGCs), NIST, ISO 27001, and applicable regulatory requirements. 

• Oversee SAP GRC Access Control, Emergency Access Management, and periodic user access reviews. 

• Serve as primary SAP security contact for internal and external audits. 

Security Operations Oversight 

• Direct SAP authorization strategy across all SAP environments. 

• Ensure appropriate design and maintenance of roles, profiles, and access models. 

• Establish KPIs and control monitoring capabilities to measure effectiveness and compliance. 

• Oversee remediation efforts related to audit findings, control deficiencies, and security risks. 

Organizational Leadership 

• Lead and mentor SAP security analysts and architects. 

• Manage system integrators, managed service providers, and consulting partners. 

• Develop organizational capabilities and succession plans within the SAP security function. 

• Manage budgets, resource planning, and vendor engagements. 

Stakeholder Management 

• Collaborate with executive leadership, Internal Audit, Compliance, Risk Management, and business process owners. 

• Communicate security risks, trends, and compliance posture to senior leadership. 

• Provide strategic guidance on security implications of new SAP initiatives and business requirements. 

Transformation & Innovation 

• Lead security design for S/4 HANA upgrades, migrations, acquisitions, divestitures, and enhancements. 

• Drive automation and modernization of access governance processes. 

• Drive the adoption and governance of Artificial Intelligence (AI) and Generative AI capabilities within the SAP ecosystem, ensuring secure implementation, regulatory compliance, responsible use, and alignment with enterprise business objectives. 

• Evaluate emerging SAP security technologies and cybersecurity trends. 

• Champion continuous improvement initiatives that enhance both security and user experience. 

ESSENTIAL QUALIFICATIONS: 

• 10+ years of SAP Security and Governance experience. 

• 5+ years of progressive leadership experience managing technical teams. 

• Strong understanding of information security management principles, SAP application security implementation methodologies, and SAP user and role management tools (i.e., CUA and/or IDM). 

• Deep expertise in SAP authorizations, SAP GRC, SoD, and compliance frameworks. 

• Experience supporting SOX-regulated environments. 

• Demonstrated experience leading the security effort in large SAP transformation programs. 

• Good working experience with Microsoft Excel, Word, Visio, Project, and PowerPoint 

• Strong communication and interpersonal skills 

• Strong time management skills 

DESIRED QUALIFICATIONS: 

• Experience in chemical manufacturing or mining industry 

• Knowledge of SAP Cloud Identity Services, IAS/IPS, and cloud security architectures. 

• Professional certifications such as: 

• CISSP 

• CISM 

• SAP Security Certifications 

• CRISC 

• CGEIT 

• Future-focused and willingness to embrace new SAP technologies 

• Familiar with an international and multi-cultural environment 

EDUCATION QUALIFICATIONS: 

• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Accounting, or related field. 

LANGUAGE SKILLS: 

• Fluent in English 

• Spanish / German / Chinese would be beneficial but not required