Senior SAP Security Specialist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior SAP Security Specialist based in the United States.

We are seeking an experienced Senior SAP Security Specialist to strengthen enterprise security, access governance, and compliance across complex SAP environments. In this role, you will lead the design, configuration, administration, and continuous improvement of SAP roles, authorizations, and security controls. Working closely with business stakeholders, auditors, SAP functional teams, and external partners, you will help ensure that access management practices remain secure and aligned with business requirements. You will play a key role in managing SAP GRC solutions, mitigating Segregation of Duties risks, and supporting SOX compliance and audit activities. This position requires strong technical expertise, independent judgment, and the ability to influence stakeholders while resolving complex security challenges. You will also contribute to SAP projects and initiatives that support a robust internal controls environment.

Accountabilities

As a senior member of the IT Applications team, you will oversee SAP security operations and governance while ensuring that access controls remain effective, compliant, and aligned with organizational needs. Your responsibilities will include:

Design, build, maintain, and optimize SAP security roles and authorization models across SAP applications.

Assess and redesign existing role structures to strengthen security, simplify administration, and support evolving business requirements.

Administer and support SAP Governance, Risk, and Compliance (GRC) solutions, including Access Control workflows and Segregation of Duties (SoD) monitoring.

Analyze access risks and recommend appropriate mitigation strategies in line with security policies and compliance standards.

Implement, maintain, and continuously improve SAP security controls, governance processes, and compliance practices.

Generate audit evidence and maintain documentation to support SOX compliance reviews and internal and external audits.

Coordinate periodic user access reviews, access certifications, and related governance activities.

Collaborate with business process owners to validate security requirements and review and approve access requests.

Provide expert guidance to stakeholders on SAP security, authorization management, and access governance.

Support testing and validation of security-related changes, role modifications, and GRC configurations.

Participate in SAP projects, upgrades, and implementations to ensure security and compliance requirements are incorporated from the outset.

Investigate and resolve SAP security incidents, access issues, and authorization errors.

Develop and maintain security documentation, procedures, and standards.

Work with internal and external auditors to respond to audit requests and coordinate remediation activities.

Identify opportunities to automate security administration and compliance processes.

Requirements

The ideal candidate brings extensive SAP security administration experience, strong knowledge of access governance, and the ability to manage complex security and compliance activities independently. You should have:

A bachelor's degree at minimum.

At least 5 years of experience in SAP security administration.

At least 5 years of experience designing and maintaining SAP roles, authorizations, and user access controls.

At least 3 years of experience administering SAP GRC Access Control or comparable compliance solutions.

Strong understanding of SAP security architecture, authorization management, and access governance.

Knowledge of Segregation of Duties concepts, access risk analysis, and risk mitigation controls.

Experience supporting SOX compliance activities, audit evidence collection, and internal or external audit engagements.

Experience testing and validating SAP security configurations, role changes, and authorization updates.

Strong analytical and problem-solving skills, with the ability to assess risks and recommend effective solutions.

Excellent communication and collaboration skills to work effectively with business stakeholders, auditors, and technical teams.

A proactive ownership mentality and the ability to exercise independent judgment.

Additional experience and qualifications that are valued:

A bachelor's degree in Information Technology, Computer Science, Business Information Systems, Cybersecurity, or equivalent practical experience.

Experience supporting multiple SAP modules, including Finance, Supply Chain, Procurement, or Manufacturing.

Understanding of internal control frameworks and regulatory compliance requirements.

Experience supporting SAP Private Cloud or RISE with SAP environments.

Familiarity with ControlPanelGRC (CPGRC).

SAP Security or GRC certifications.

Experience preparing for and supporting external audit engagements.

Knowledge of SAP Fiori security, including catalogs, groups, spaces, and pages.

Additional Eligibility Requirements

Applicants must qualify as a U.S. Person under applicable contractual requirements. This includes U.S. citizens, permanent residents (Green Card holders), and individuals granted asylum or refugee status.

Due to U.S. Government national security requirements, candidates must not be nationals of the People's Republic of China or Russia unless they are also U.S. citizens.

Benefits

Competitive compensation.

Opportunity to contribute to groundbreaking quantum computing technology.

Flexible work arrangements supporting work-life balance.

Employer-subsidized medical, dental, and vision insurance.

401(k) retirement savings plan with company matching.

Student loan repayment benefit.

Equity opportunities.

Generous paid time off and sick leave.

12 paid holidays annually.

Paid parental leave.

Employee discount programs.

Opportunities for professional growth and collaboration with leading scientists, engineers, and researchers.