Cyber SAP Internal Controls Manager/ Engineering Manager II

Deloitte • Jersey City, NJ

4d • $134,500 - $265,100

About The Position

Join Deloitte’s Cyber Enterprise Security team and help clients strengthen SAP risk management, internal controls, governance, and compliance across enterprise transformation, ERP and cloud modernization, and implementations. The Manager leads business process and IT general controls strategy, design, testing, and deployment across SAP ERP environments. The role helps organizations manage risk and enable business operations by addressing controls and regulatory compliance requirements across SAP ERP platforms, integrations, and transformation programs.

The Manager leads assessment of business-process and technology risks, owns the SAP controls workstream, and directs the design and testing of automated and manual controls. The position advises on controls for AI-enabled processes, facilitates stakeholder workshops, oversees segregation-of-duties and access analyses, and applies regulatory requirements such as SOX. The Manager also coordinates control deployment and go-live readiness, oversees work products and documentation, engages with audit and compliance stakeholders, and guides team members.

Requirements

• Bachelor’s degree in accounting, information systems, business, or a related field.
• At least 6 years of experience designing and implementing automated and manual internal controls in an SAP ERP environment.
• At least 3 years of experience with key business processes such as record to report, procure to pay, or order to cash, and their inherent risks and controls.
• Experience evaluating SAP ERP configuration and translating business requirements into automated control designs; ability to explain the configuration and control logic for at least 3 control examples.
• Experience assessing risks and controls in at least 2 IT general control domains, such as access management, change management, or IT operations.
• At least 3 years of experience with segregation-of-duties frameworks and mitigating controls.
• At least 3 years of experience applying SOX or comparable regulatory requirements to SAP ERP controls, including supporting control documentation, testing, or remediation.
• Ability to travel an average of 50%, based on clients, industries or sectors served, and project requirements.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and work-product quality.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor and provide clear guidance to others.

Nice To Haves

• Experience with SAP ERP implementations or transformations.
• Experience with automated solutions for continuous control monitoring, access management, or cloud governance, such as SAP Process Control or SAP Identity Access Governance.
• Experience with controls for SAP ERP Cloud applications such as SuccessFactors, Ariba, Concur, or Business Technology Platform.
• Experience with pre-go-live control testing, audit support, or compliance programs.
• Professional certifications such as CPA, CISA, CIA, CRISC, or SAP certifications.
• Experience working in consulting or professional services environments.

Responsibilities

• Lead assessments of business-process and technology risks arising from transformation and implementation initiatives, and translate findings into implications for client risk and controls environments.
• Own SAP controls workstreams across business, functional, and technical teams, connecting SAP configurations and custom development to practical, risk-based control requirements.
• Direct the design of automated and manual business-process controls and IT general controls across SAP-enabled processes.
• Advise clients on controls for AI-enabled business processes and contribute to fit-for-purpose AI governance design and implementation.
• Facilitate executive and working-level workshops to align stakeholders on risk priorities, control design, ownership, and implementation readiness.
• Oversee segregation-of-duties and critical or sensitive access analyses; recommend and help define mitigating controls.
• Plan and oversee control design testing, evaluate evidence and results, resolve gaps with stakeholders, and communicate findings and remediation needs.
• Apply relevant regulatory requirements, including SOX where applicable, to controls design, testing, and supporting documentation.
• Lead transition and knowledge-transfer activities so control owners and stakeholders understand their responsibilities and are prepared to operate controls.
• Manage engagement with internal audit, compliance, and other assurance stakeholders, aligning on control objectives, evidence needs, and issue resolution.
• Coordinate with client and delivery teams to govern control deployment, track dependencies and risks, and support implementation or go-live readiness.
• Own the quality and timely delivery of risk and control matrices, test procedures, job aids, impact assessments, and other controls documentation.
• Guide and develop team members, review their work, and manage workstream priorities, progress, and deliverable quality.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and performance factors.
• Professional development opportunities through on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager