SAP Security Lead

Slate Auto

13d•$141,807 - $212,710

About The Position

At Slate, we’re building safe, reliable vehicles that people can afford, personalize and love—and doing it here in the USA as part of our commitment to reindustrialization. The spirit of DIY and customization runs throughout every element of a Slate, because people should have control over how their trucks look, feel, and represent them. We are seeking a highly experienced SAP Security Lead to join our team. The ideal candidate brings 12+ years of SAP Security expertise, with a proven track record leading SAP security architecture across complex enterprise environments. This role demands deep knowledge of GRC Access Control, SOX ITGC compliance, HANA Security, and role design across S/4HANA landscapes.

Requirements

12+ years of SAP Security and Basis experience, with multiple full-lifecycle implementations.
Demonstrated leadership experience as SAP Security Lead on large-scale enterprise programs.
Hands-on expertise with GRC Tool such CPGRC, SAP GRC Access Control (Versions 10.x / 12.x) including ARM, EAM, UAR, and BRM.
Deep knowledge of SAP HANA Security, S/4HANA role architecture, and SAP Fiori authorization concepts.
Strong understanding of SOX ITGC controls, Segregation of Duties (SoD) principles, and audit evidence requirements.
Experience with S/4HANA upgrades.
Proficiency with PFCG, SU25, SUIM, and related SAP security administration tools.
Familiarity with SAP Cloud security and authorization group design.

Nice To Haves

SAP Certified Support Associate (CBOSUP90) or equivalent SAP security certification.
Experience with vulnerability assessment tools such as Onapsis.
Exposure to automation frameworks (e.g., Ansible playbooks for GRC integration tasks).
Experience working in GCP or other cloud-hosted SAP environments.
Familiarity with CPGRC and SDLC processes.
Master's degree in Computer Science or related field.

Responsibilities

Lead SOX walkthrough activities as primary SME for all SAP ITGC controls, producing evidence packages for internal and external auditors (e.g., Deloitte, PwC, KPMG).
Maintain and remediate audit observations; ensure sustained auditor sign-off across review cycles.
Implement structured SOX audit readiness frameworks, supporting AuditBoard or equivalent GRC platforms.
Administer SAP GRC Access Control including Access Request Management, Role Management, and Emergency Access Management (Firefighter).
Design and automate quarterly User Access Review (UAR) programs with role-owner approval workflows and escalation logic.
Expand and maintain CPGRC or SAP GRC rulesets covering custom Z-transactions and Fiori apps for comprehensive SoD monitoring.
Architect and implement SAP security roles across S/4HANA, SAP Cloud Products, and PI/PO Java systems.
Apply SAP Best Practices, IT governance standards, and risk management principles in all role designs.
Perform SU25 and PFCG role adjustments during system upgrades and landscape changes.
Design granular roles for Technical Administrators, Developers, Power Users, and Business Users.
Implement and manage System IDs and service accounts using GRC AC workflows.
Support SAP system upgrades, landscape migrations, and cloud platform security initiatives.
Partner with Basis, Functional, Audit, and Business teams throughout the SDLC.
Design and deliver SAP training programs and internal workshops to build organizational capability.
Provide clear documentation and knowledge transfer to support operational continuity.