SAP Application Security Lead

The work

Leads the SAP Application Security and Identity Access Management (IAM) capability for the S/4HANA program. This role is responsible for the strategic design, implementation, and governance of the security framework, ensuring all user management functions adhere to the “Least Privilege” principle and comply with federal security standards.

You will direct the configuration of SAP GRC to automate User Management (UM) and Segregation of Duties (SoD) analysis, while leading the security workstream through design, build, testing, deployment, audit, and sustainment phases. This role requires expertise in complex security analysis, role architecture, SoD risk mitigation, and SAP GRC Access Control. You will manage relationships with auditors, CISOs, and workstream leads and guide junior team members in SAP HANA security, Fiori access design, and troubleshooting.

Key responsibilities:

• Lead and govern User Access Management (UAM), overseeing end‑to‑end design, implementation, and maintenance of S/4HANA security roles, including Fiori authorizations
• Architect SAP GRC Security Components, leading analysis, design, and testing of SAP GRC Access Control (ARA, ARM, EAM, CUP)
• Oversee SoD Risk Assessments and establish protocols for identifying and remediating Segregation of Duties and Critical Action risks
• Direct user provisioning and role design processes, ensuring compliance with Security Management controls and federal audit requirements
• Manage User Access Reviews (UAR) through periodic certification of user entitlements
• Lead support for internal and external audit requests related to user access controls
• Monitor and report on overall security posture, including SoD violations and high‑risk access
• Collaborate with functional leads to ensure secure integration across B2R, P2P, and O2C modules
• Manage, mentor, and train junior security specialists to build capability in SAP security and federal compliance
• Ensure adherence to delivery methodology for managing the full security lifecycle

Here’s what you need:

• Extensive experience in SAP Security Management, S/4HANA security, SAP GRC (12.0+), and Fiori Catalog/Group design
• Proven leadership experience managing security workstreams in large‑scale ERP transformations
• Deep knowledge of SoD frameworks, Global Rule Sets, and mitigating control design
• Strong communication and interpersonal skills for collaboration with Workstream Leads, Auditors, and CISOs
• Experience with project planning, resource management, and maintaining security risk logs
• Ability to align security strategy with business objectives while supporting an optimized Fiori user experience
• Experience mentoring junior team members in federal security compliance (NIST/FISMA)
• Experience with IAM integration with federal SSO or PIV/CAC authentication

Eligibility requirements:

• U.S. Citizenship required
• Ability to obtain a Public Trust government clearance