SAP Security Manager

PepsiCo•Plano, TX

About The Position

The SAP Security Sustain Manager leads the day-to-day operation of SAP Security services across production and non-production environments. The role is responsible for access governance, compliance, audit support, service delivery, operational excellence, vendor management, and continuous improvement while ensuring business users maintain secure and compliant access to SAP systems. The role balances security governance, business enablement, audit compliance, risk management, sustain support operations, and vendor management to ensure reliable and efficient SAP security services across the enterprise.

Requirements

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field.
8+ years of SAP Security experience.
3+ years of leadership or people management experience.
Deep expertise in: SAP Security & Authorization Concepts
Deep expertise in: SAP GRC Access Control
Deep expertise in: Segregation of Duties (SoD)
Deep expertise in: SAP S/4HANA Security
Deep expertise in: SAP Fiori Security
Deep expertise in: SAP BW, HCM, CRM, SCM Security
Deep expertise in: Audit and Compliance Controls
Experience leading global SAP security initiatives and project teams.

Nice To Haves

SAP Security or SAP GRC certifications.
Experience with cloud security models and SAP BTP.
Knowledge of SOX, COBIT, NIST, and cybersecurity frameworks.
Experience supporting multinational SAP landscapes and global deployments.
Strong understanding of SAP integration and application controls.

Responsibilities

Lead SAP Security sustain operations across global SAP landscapes
Own service delivery performance, SLAs, KPIs, and operational metrics.
Manage incident, request, and problem management processes.
Ensure timely resolution of SAP security tickets and escalations.
Drive continuous service improvements and operational efficiencies.
Oversee user provisioning, deprovisioning, and access modifications.
Ensure compliance with access management policies and standards.
Govern privileged access, Firefighter IDs, and emergency access processes.
Review and approve high-risk access requests.
Support identity lifecycle management activities.
Govern SAP role design, maintenance, and optimization.
Approve role changes and authorization enhancements.
Ensure role-based access controls support business requirements.
Maintain security authorization matrices and role documentation.
Drive role simplification and standardization initiatives.
Lead Segregation of Duties (SoD) risk management and remediation.
Govern SAP GRC Access Control processes and rulesets.
Conduct periodic access reviews and certifications.
Monitor sensitive access and risk violations.
Ensure compliance with SOX, ITGC, and corporate security standards.
Serve as the primary SAP Security contact for internal and external audits.
Coordinate audit evidence collection and control testing.
Ensure execution of SAP security controls.
Manage remediation plans for audit observations and compliance findings.
Maintain security policies, procedures, and support documentation.
Oversee SAP vulnerability identification and remediation.
Review SAP OSS security notes and patch recommendations.
Ensure security risks are assessed before production deployment.
Monitor compliance with enterprise cybersecurity standards.
Drive closure of security findings and risk exceptions.
Provide security approval for application enhancements and releases.
Review security impacts of projects, upgrades, and system changes.
Participate in testing, cutover, and hypercare support.
Ensure security controls remain effective following deployments.
Support transition of projects into sustain operations.
Lead internal SAP Security analysts and external service providers.
Manage vendor performance, contract deliverables, and resource planning.
Conduct performance reviews and skill development activities.
Establish operational governance with delivery partners.
Drive knowledge management and cross-training initiatives.
Provide regular operational reporting to leadership.
Present security metrics, risk posture, audit status, and service health.
Partner with Business, Controls, Audit, Cybersecurity, and SAP functional teams.
Escalate critical security risks and operational issues appropriately.
Support executive decision-making through security insights and recommendations.