Manager, SAP Security Controls & Governance

The Coca-Cola Company•Atlanta, GA

2d•$124,600 - $148,200•Onsite

About The Position

The Manager, SAP Security Controls & Governance serves as the technical lead for SAP security governance and ERP compliance controls within the IT Governance & Compliance organization. This role designs, administers, and continuously improves SAP security controls and SAP GRC capabilities, including Segregation of Duties (SoD), sensitive access, emergency access (Firefighter), role governance, and SAP GRC ruleset management. The Manager partners with SAP Security, ERP delivery teams, business process owners, Finance, Internal Audit, and external auditors to strengthen the SAP control environment, support SOX compliance, and drive governance automation and continuous monitoring capabilities.

Requirements

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Computer Science, or a related field.
5+ years of experience supporting SAP Security, SAP GRC, access governance, or IT compliance programs.
Hands-on experience with: SAP Security Authorization Concepts, Segregation of Duties (SoD), Sensitive Access Management, Firefighter/Emergency Access Management, SAP Role Design and Governance, User Access Reviews.
Experience administering SAP GRC Access Control solutions, including ARA, ARM, EAM, and BRM.
Strong understanding of SOX ITGCs and SAP compliance requirements.
Experience maintaining SAP GRC rulesets, mitigating controls, and reporting access risk.
Currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.

Nice To Haves

Experience supporting SAP RISE, SAP S/4HANA, SAP Fiori, and SAP BTP environments.
Experience with controls automation, continuous controls monitoring, and governance analytics.
Professional certifications such as CISA, CISM, CRISC, SAP Security, or SAP GRC certifications.

Responsibilities

Serve as the primary technical subject matter expert for SAP Security and SAP GRC Access Control.
Lead governance activities supporting: Segregation of Duties (SoD), Sensitive Access Reviews, Emergency Access Management (Firefighter), Privileged Access Governance, User Access Reviews (UARs), Role Owner Reviews (RORs).
Administer and maintain SAP GRC Access Control modules, including: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM).
Maintain SAP GRC rulesets, risk libraries, mitigating controls, and access risk reporting.
Partner with SAP Security teams to support role design, access provisioning, role optimization, and access risk remediation.
Perform risk assessments related to SoD conflicts, sensitive access, privileged access, and Firefighter activity.
Support governance activities across SAP ECC, SAP S/4HANA, SAP RISE, SAP Fiori, SAP BTP, and related SAP applications.
Design, implement, and maintain SAP-focused IT General Controls (ITGCs) and compliance solutions supporting SOX requirements.
Develop mitigating and compensating controls to address SAP security and access governance risks.
Evaluate control effectiveness and recommend enhancements to strengthen the SAP control environment.
Support SAP transformations, migrations, upgrades, and ERP modernization initiatives by ensuring appropriate governance and compliance requirements are implemented.
Support audit and compliance activities by providing security risk analyses, evidence, reporting, and remediation support.
Configure, administer, and enhance SAP GRC and related governance technologies.
Drive automation of User Access Reviews, SoD reviews, Firefighter monitoring, and compliance reporting.
Develop dashboards, analytics, and reporting that improve visibility into access risks, control deficiencies, and remediation activities.
Collaborate with technology partners and vendors to optimize governance tools and compliance processes.
Evaluate emerging governance technologies, continuous controls monitoring capabilities, and automation opportunities.
Identify control gaps and recommend solutions to improve reliability, efficiency, and effectiveness.
Support continuous controls monitoring and compliance reporting initiatives.
Contribute to the development of governance policies, standards, procedures, and best practices.
Drive improvements that enhance automation, risk visibility, and compliance execution.
Work closely with IT, Finance, SAP Security, Internal Audit, and business stakeholders to support compliance and governance objectives.
Provide technical guidance on SAP security controls, access governance, and risk mitigation strategies.
Support control owners and system administrators in addressing control deficiencies and remediation activities.