Senior Manager SAP Security Governance: Risk and Compliance Management

$105,000 - $150,000/Yr

005 P&G US Business Serv Co - Cincinnati, OH

Full-time - Senior

Cincinnati, OH

About the position

The Senior Manager of SAP Second Line of Defense is a strategic role focused on supporting SAP systems' compliance, risk management, and control effectiveness. This position is responsible for establishing and maintaining the SAP Security Risk and Compliance Management framework, ensuring the integrity of the SAP landscape, and supporting the organization's overall risk management framework. The role involves overseeing risk and compliance activities, developing frameworks, and serving as an expert in SAP Risk and Compliance.

Responsibilities

• Support the SAP Security Strategy and Governance Framework on an operational level.
• Act as both a controls framework specialist and control monitoring/automation tool specialist.
• Support the development, deployment, and continuous improvement of SAP risk management strategies and frameworks.
• Enforce compliance with relevant industry standards, regulations, and internal IT policies related to SAP systems.
• Work closely with internal audit teams to ensure effective and timely SAP-related audits.
• Design and implement robust control frameworks for SAP processes in collaboration with process owners and IT teams.
• Deliver and maintain incident response plans for SAP systems.
• Foster strong working relationships with various stakeholders, including IT, finance, legal, compliance, and external auditors.
• Support the Director of SAP Security Governance: Risk and Compliance Management in communicating risks and outages for remediation.

Requirements

• Bachelor's degree in business, Information Systems, or a related field.
• 5+ years of experience in Audit, risk management, internal controls, compliance, or a related field focusing on SAP systems.
• Extensive experience with all stacks of SAP infrastructure and application stack, with a strong understanding of SAP Security, Risk, and compliance control.
• Knowledge of SAP Automation Tools such as SAP Focus Run, SAP Solution Manager, Security Weaver, Security Bridge.
• Solid understanding of SAP processes, modules, and configurations, including ECC, S/4HANA, BTP, SAP Platform Basis, HANA DB, Integration, OS, and related technologies.
• Proficient in SAP security administration, including knowledge of authorization concepts and conducting audits and vulnerability assessments.

Nice-to-haves

• Master's degree in business, Information Systems, or a related field.
• Knowledge of the P&G information security framework and the SAP Enterprise Security Control Framework.
• Experience leading and managing multi-functional teams.
• Knowledge of Sarbanes Oxley readiness controls optimization and configuring controls around security and business processes.
• Relevant certifications such as CISA, CISSP, SAP HANATEC or equivalent.
• Experience with regulatory requirements and industry standards (e.g., SOX, GDPR) related to SAP systems.
• Knowledge of the NIST cybersecurity framework.

Benefits

• Salary + bonus (if applicable) + benefits
• Equal opportunities in employment
• Diversity and inclusion initiatives
• Reasonable accommodation for individuals with disabilities