Senior Manager - SAP Security Governance: Risk and Compliance Management

$105,000 - $150,000/Yr

Procter & Gamble - Cincinnati, OH

Full-time - Mid Level

Cincinnati, OH

Chemical Manufacturing

About the position

The Senior Manager of SAP Second Line of Defense is a strategic role focused on supporting SAP systems' compliance, risk management, and control effectiveness. This position is responsible for establishing and maintaining the SAP Security Risk and Compliance Management framework, ensuring the integrity of the SAP landscape, and supporting the organization's overall risk management framework. The role involves overseeing risk and compliance activities, developing frameworks, and serving as an expert in SAP Risk and Compliance.

Responsibilities

• Support the SAP Security Strategy and Governance Framework on an operational level.
• Act as both a controls framework specialist and control monitoring/automation tool specialist.
• Support the development, deployment, and continuous improvement of SAP risk management strategies and frameworks.
• Enforce compliance with relevant industry standards, regulations, and internal IT policies related to SAP systems.
• Work closely with internal audit teams to ensure effective and timely SAP-related audits.
• Design and implement robust control frameworks for SAP processes in collaboration with process owners and IT teams.
• Deliver and maintain incident response plans for SAP systems.
• Foster strong working relationships with various customers, including IT, finance, legal, compliance, and external auditors.
• Support the Director of SAP Security Governance: Risk and Compliance Management in communicating risks and outages to management.

Requirements

• Bachelor's degree in business, Information Systems, or a related field.
• Extensive experience (5+ years) in Audit, risk management, internal controls, compliance, or a related field, focusing on SAP systems.
• Broad-based experience and expertise with all stacks of SAP infrastructure and Application stack.
• Knowledge of SAP Automation Tools such as SAP Focus Run, SAP Solution Manager, Security Weaver, Security Bridge.
• Solid understanding of SAP processes, modules, and configurations, including ECC, S/4HANA, BTP, SAP Platform Basis, HANA DB, Integration, OS, and related technologies.
• Proficient in SAP security administration, encompassing OS and HANA database environments.

Nice-to-haves

• Master's degree in business, Information Systems, or a related field.
• Knowledge of the P&G information security framework and the SAP Enterprise Security Control Framework.
• Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), SAP HANATEC or equivalent.
• Experience in working with regulatory requirements and industry standards (e.g., SOX, GDPR) about SAP systems.
• Knowledge of the NIST cybersecurity framework.

Benefits

• Salary + bonus (if applicable) + benefits
• Equal opportunities in employment
• Diversity and inclusion initiatives
• Reasonable accommodation for individuals with disabilities