Sr Manager/Director SAP Security

Amrize•Nashville, TN

12d•Hybrid

About The Position

This role sits at the heart of the Cybersecurity organization. The Sr Manager/Director will own the SAP security and access governance strategy across the full SAP landscape, ensuring robust SOX compliance, while also providing strategic direction for the broader enterprise. The ideal candidate brings 15+ years of hands-on SAP security depth - from role design and SoD rule set management to GRC operations and audit excellence. The preferred locations are Chicago or Nashville. The position can also be remote as long as you are able to do the travel.

Requirements

Bachelor's degree
15+ years in SAP Security, SAP GRC, and bolt on apps, with the majority of tenure in hands-on SAP security roles and GRC 10.1/12.0, including implementation experience with all GRC Access Control Modules
Extensive experience delivering SAP Security and Authorization solutions across complex SAP environments, with strong expertise in SAP S/4HANA Security, Role Design and Authorization Concepts, and SAP Security Roles and Authorizations.
Deep hands-on knowledge of SAP user administration, authorization objects, landscape security, and GRC MSMP/BRF+ configurations.
5+ years in leadership roles managing teams and programs; experience leading both SAP and Governance initiatives
Proven capability engaging business and technical stakeholders, conducting access and risk assessments, resolving security issues, and producing high-quality security design, governance and compliance documentation
Experience supporting SAP transformation and cloud adoption programs across SAP S/4HANA and SAP BTP environments.
Experience with Licensing Optimization in SAP S/4 Cloud Instances
Experience with Cross-System Risk Analysis and Ruleset construction from Scratch
CISSP, CISM, CISA, or CRISC (preferred)
SAP Security or SAP GRC certifications (preferred)
S/4HANA Security
ECC Security
BTP & Fiori
HANA DB Security
SAP GRC ARA
SAP GRC ARM
SAP GRC EAM
Process Control
SoD Rule Sets
Mitigating Controls
RBAC / Role Design
SOX / ITGC Compliance
Strategic thinker with strong hands-on execution in SAP security environments
Deep technical credibility in SAP security coupled with broad SOX and Governance awareness
Exceptional communication skills — able to translate SoD and access risks into business impact
Collaborative leader who can influence without authority across IT, Finance, and Compliance
Ability to manage complexity across multiple SAP instances, GRC and S/4 Hana
Successful candidates must adhere to all safety protocols and proper use of Amrize approved Personal Protection Equipment ("PPE"), including but not limited to respirators. Subject to applicable law, employees that are required to wear respirators must be clean shaven where the respirator seal meets the face in order to pass the qualitative and quantitative fit tests.

Nice To Haves

Master's degree
Field of Study Preferred: Information security, Computer Science, Finance, or related field required
Big 4 experience strongly preferred

Responsibilities

Lead access governance activities including role design, user access reviews, Segregation of Duties assessments, risk remediation, access certifications and ongoing security compliance.
Act as a player-coach: provide hands-on SAP security guidance for complex role design, SoD, and GRC challenges
Own demand management, prioritization, and resource planning across both SAP Operations, SOX initiatives, S/4 Hana implementations, and upgrades.
Own all SAP controls supporting SOX compliance (ITGCs and application-level access controls)
Serve as the primary liaison for internal and external auditors on SAP access and security topics
Translate technical SAP controls into clear, business-aligned compliance narratives
Ensure high-quality, consistent audit evidence and drive remediation of any audit findings
Lead end-to-end SoD governance including definition, maintenance, and enforcement of SoD rule sets
Identify and document mitigating controls for approved SoD conflicts; own ongoing monitoring
Drive periodic access reviews and certification campaigns aligned to SOX requirements
Govern and evolve the enterprise SAP role catalog including business roles and single roles
Lead transformation toward modern role-based and attribute-based access control (RBAC/ABAC) models
Define and enforce role design standards, naming conventions, and governance frameworks
Manage the full role lifecycle: design, testing, deployment, and ongoing maintenance
Provide end-to-end ownership of SAP security across S/4HANA, ECC, BTP, and Fiori landscapes
Oversee SAP GRC implementation and optimization: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Process Control
Drive standardization, automation, and efficiency in day-to-day SAP security operations
Manage transport security (STMS) implications and security patching cadence
Experience with constructing and presenting SAP Security, GRC, and SOX initiatives roadmap to C Suite,
Serve as a trusted advisor to senior leadership, IT, Finance, and business teams on SAP security, GRC and SOX Initiatives
Demonstrate a commitment to communicating, improving and adhering to health, safety and environmental policies in all work environments and areas. Promote a culture of safety and exhibit these behaviors.

Benefits

Competitive salary
401(k) pre-tax and/or Roth after-tax savings
Employee Stock Purchase Plan
Medical, Dental, Disability and Life Insurance
Holistic Health & Well-being programs
Health Savings Accounts (HSAs) & Flexible Spending Accounts (FSAs) for health and dependent care
Vision and other Voluntary benefits and discounts
Paid time off & paid holidays
Paid Parental Leave (maternity & paternity)
Educational Assistance Program
Dress for your day