SAP Security Manager

E. & J. Gallo Winery•Modesto, CA

7d•Hybrid

About The Position

At Gallo, we believe great security enables great business. As an SAP Security Manager, you’ll play a critical role in protecting and enabling our SAP landscape while leading a team that partners closely with IT and the business. This role sits at the intersection of governance, risk, compliance, and operational excellence—ensuring the right access, the right controls, and the right outcomes. You’ll guide and develop a team of SAP Security Administrators and Analysts, providing both strategic direction and hands-on expertise. From designing and maintaining security roles to supporting GRC processes and audit readiness, your work will directly impact how our systems support finance, supply chain, customer management, and beyond. You’ll collaborate with functional and technical partners to embed strong access controls into evolving business processes while adapting to new technologies and platforms. This is an opportunity to shape SAP security practices across development, testing, and production environments while helping Gallo maintain compliance with IT general controls and regulatory expectations. You’ll influence standards, improve processes, and contribute to the long-term SAP security strategy—all while modeling intrapreneurship, ownership, and accountability. If you thrive in a leadership role where trust, collaboration, and continuous improvement matter, this is your chance to make a lasting impact.

Requirements

Master’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 5 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 11 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility.
Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation.
Required to be 18 years or older.

Nice To Haves

Master’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 9 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 13 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility.
7 years of experience with SAP GRC Access Control/Process Controls Suite, including implementation, upgrades, or rollouts, with hands-on implementation skills across ARA, EAM, ARM, and BRM modules.
Experience supporting SAP ECC or S/4HANA security implementations or operations, including SOD conflict resolution, role design, user administration, and Fiori or SAP HANA–enabled environments.

Responsibilities

Guiding and developing a team of SAP Security Administrators and Analysts.
Providing strategic direction and hands-on expertise.
Designing and maintaining security roles.
Supporting GRC processes and audit readiness.
Collaborating with functional and technical partners to embed strong access controls into evolving business processes.
Adapting to new technologies and platforms.
Shaping SAP security practices across development, testing, and production environments.
Helping Gallo maintain compliance with IT general controls and regulatory expectations.
Influencing standards and improving processes.
Contributing to the long-term SAP security strategy.