Senior Product Manager, SAP GRC

NBCUniversal•New York, NY

2d•$130,000 - $170,000•Remote

About The Position

The Senior Product Manager, SAP GRC is part of NBCUniversal’s Corp Core Innovation & Operations organization and reports directly to the Director, GRC. The role leads strategy and delivery for complex SAP security and access-governance initiatives across NBCUniversal. It applies advanced functional and technical expertise to solve complex problems, improve systems and processes, guide architecture and design decisions, and deliver high-impact initiatives. The position serves as a subject matter expert for SAP GRC and security, advises stakeholders on complex matters, and provides technical guidance and oversight. It also mentors associates, influences stakeholders across the business, and may be accountable through the team for tactical business targets. The role owns and evolves SAP GRC strategies, policies, roadmaps, standards, and procedures; leads implementation and continuous improvement of SAP GRC Access Control and Identity and Access Governance; and supports security across SAP environments, cloud integrations, Fiori applications, and AI-enabled processes. It works with architecture, application, engineering, business, audit, compliance, and security teams to design secure access models, maintain regulatory compliance, and translate business needs into technical specifications and delivery priorities. This is a fully remote position, with work expected from a non-NBCUniversal worksite, most commonly the employee’s residence. The role is eligible for company-sponsored benefits. The listed salary range is $130,000–$170,000 and the position is bonus eligible.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
10+ years of experience in SAP Security, SAP GRC, Identity and Access Management, or related SAP security disciplines.
Strong knowledge of the SAP Authorization Concept, including roles, profiles, authorization objects, user administration, and authorization troubleshooting.
Hands-on experience designing, building, and maintaining SAP security roles and authorizations across SAP S/4HANA, MDG, BW4HANA, SAC, and CIS/BTP environments.
Strong working knowledge of SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter), and MSMP workflows.
Experience performing SoD analysis, security risk assessments, remediation, and mitigation.
Experience supporting SAP security implementations, upgrades, migrations, and production environments.
Knowledge of application security concepts across ABAP, SAP HANA, Fiori, and related SAP technologies.
Strong analytical, problem-solving, and troubleshooting skills to resolve complex SAP security and authorization issues.
Strong written and verbal communication skills and ability to work effectively with business, functional, technical, audit, and compliance teams.
Ability to manage multiple assignments and priorities in a complex enterprise environment.
Self-motivated, quick to learn, and able to adapt to changing technologies and business priorities.

Nice To Haves

12+ years of experience as an SAP Security and/or SAP GRC professional, preferably in large, complex enterprise environments.
Demonstrated leadership of at least two full-lifecycle SAP implementations, including architecture and design decisions, cross-functional delivery, risk management, and stakeholder alignment.
Experience with 3 to 5 full-lifecycle SAP Security/GRC implementations, particularly across SAP S/4HANA and SAP GRC Access Control/Process Control 12.x.
Deep expertise in one or more SAP Security/GRC domains and demonstrated subject-matter-expert credibility.
Experience designing SAP security architecture and authorization models for SAP S/4HANA and Fiori, including business roles, catalogs, spaces/pages, OData services, and backend authorization requirements.
Experience with SAP HANA security, including database roles, privileges, and integration with application-level security.
Experience with SAP cloud security technologies such as SAP BTP, SAP Cloud Identity Services/IAS and IPS, SAP IAG, and SAP Analytics Cloud.
Experience integrating SAP security with enterprise Identity and Access Management and Privileged Access Management solutions.
Ability to provide technical leadership, mentor and coach team members, and establish security standards and best practices across cross-functional teams without direct authority.
Strong executive communication skills, including translating SAP security, SoD, and compliance issues into business risks and recommendations for senior leadership.
Experience partnering with Internal Audit, External Audit, SOX, Compliance, Cybersecurity, and Risk Management teams.
Advanced analytical and problem-solving skills, including evaluating multiple variables, resolving ambiguous issues, and recommending pragmatic solutions.
Strategic thinking and ability to align SAP Security and GRC architecture with broader cybersecurity, IAM, compliance, and business strategy.
SAP Security, SAP GRC, cybersecurity, IAM, or related professional certifications.
Experience with SAP BTP security concepts, including identity authentication, authorization, role collections, destination security, and integration with enterprise identity providers.
Working knowledge of SAP Joule and AI-enabled SAP solutions, including security, access governance, data privacy, and responsible AI considerations.
Familiarity with securing and governing SAP Joule, generative AI, workflow automation, and cloud application services within SAP’s security and compliance framework.
Exposure to SAP IAG, SAP BIS, SAP Audit Management, and Process Controls.

Responsibilities

Lead implementation, configuration, and continuous improvement of SAP GRC Access Control and Identity and Access Governance modules across complex, interdependent workstreams.
Provide security design support for SAP BTP extensions, Fiori applications, cloud integrations, and AI-driven business processes across SAP S/4HANA and connected systems.
Collaborate with architecture, application, engineering, business, and compliance teams to evaluate and implement secure access models for SAP BTP, AI services, and intelligent automation solutions.
Provide technical guidance and drive SAP security architecture and design decisions.
Design and implement role-based access controls, firefighting, and segregation-of-duties rules to support regulatory and company requirements.
Build relationships across and beyond the area of expertise, influence senior stakeholders, and translate business needs into scalable technical specifications and delivery priorities.
Recommend SAP GRC features, security technologies, tools, and practices that improve risk and compliance posture.
Own and evolve SAP GRC strategies, policies, roadmaps, standards, and procedures, identifying opportunities to improve methods, systems, and tools.
Advise product, engineering, architecture, audit, compliance, and business teams as the SAP GRC and security subject matter expert.
Lead complex projects with multiple dependencies, establish delivery outcomes, provide technical oversight, manage risks, and support achievement of business targets.
Mentor and coach product, security, and technical associates and strengthen consistent application of SAP security and governance standards.
Exercise independent judgment in product, architecture, control, and delivery decisions, balancing business value, feasibility, compliance, and risk.
Ensure compliance with regulatory requirements such as SOX and GDPR and applicable industry standards.
Develop and maintain GRC workflows, including access request, approval, and review processes.
Integrate SAP GRC with systems including SAP Analytics Cloud, SuccessFactors, SAP BTP, SAP HANA, Fieldglass, and Active Directory.
Assess existing access controls and authorization processes to identify gaps and risks.
Design, develop, and maintain SAP user-management and security architecture across multiple SAP environments and provide solution recommendations.
Analyze roles and access restrictions from an audit perspective and align them with the GRC access-management solution.
Monitor compliance with the SAP IT Security framework and track Internal Security Control gaps and exceptions for the global IT control environment.
Support adherence to government and corporate security guidelines, including SoD, SOX, and privacy standards.
Assist with the development and implementation of SAP security policies, processes, architecture, training, and communications.
Identify security solutions, implement standards and best practices, and proactively identify and remediate vulnerabilities.
Manage security for SAP ERP, SAP BW, Fiori, Gateway, SAP S/4, and SAP HANA; implement the SAP Security Strategy and troubleshoot complex SAP security issues.
Partner with solution architects and business process owners to translate requirements into SAP security designs and maintain SAP security roles.