SAP Security Lead

Slate Auto

SAP Security Lead responsible for security architecture across complex enterprise environments. Implementing GRC access control and ensuring compliance with SOX ITGC standards in a remote capacity.

Posted 7/25/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $141,807 - $212,710 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in SAP Security and Basis, with a strong focus on SOX ITGC controls, GRC tools, and role architecture across S/4HANA and SAP Cloud environments. Proven ability to lead large-scale enterprise programs and implement effective audit readiness frameworks.

Highest-signal resume keywords

SAP Security Lead ExperienceSOX ITGC Controls KnowledgeGRC Tool Expertise (CPGRC, SAP GRC Access Control)S/4HANA Role ArchitectureSegregation of Duties (SoD) Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAP SecurityGRC Access ControlS/4HANA UpgradesPFCGSU25User Access Review (UAR)Role ManagementAudit Evidence RequirementsSAP Fiori AuthorizationIT Governance Standards

Soft Skills

LeadershipCollaborationDocumentationTraining DeliveryKnowledge Transfer

Tools & Technologies

AuditBoardSAP GRCSAP HANASAP Cloud ProductsPI/PO Java Systems

Industry Keywords

SOX ComplianceSegregation of Duties (SoD)Audit ObservationsAccess Request ManagementEmergency Access Management

Tech Stack

Tools & technologies

CloudJavaSDLC

About the role

Key responsibilities & impact

Lead SOX walkthrough activities as primary SME for all SAP ITGC controls, producing evidence packages for internal and external auditors (e.g., Deloitte, PwC, KPMG).
Maintain and remediate audit observations; ensure sustained auditor sign-off across review cycles.
Implement structured SOX audit readiness frameworks, supporting AuditBoard or equivalent GRC platforms.
Administer SAP GRC Access Control including Access Request Management, Role Management, and Emergency Access Management (Firefighter).
Design and automate quarterly User Access Review (UAR) programs with role-owner approval workflows and escalation logic.
Expand and maintain CPGRC or SAP GRC rulesets covering custom Z-transactions and Fiori apps for comprehensive SoD monitoring.
Architect and implement SAP security roles across S/4HANA, SAP Cloud Products, and PI/PO Java systems.
Apply SAP Best Practices, IT governance standards, and risk management principles in all role designs.
Perform SU25 and PFCG role adjustments during system upgrades and landscape changes.
Design granular roles for Technical Administrators, Developers, Power Users, and Business Users.
Implement and manage System IDs and service accounts using GRC AC workflows.
Support SAP system upgrades, landscape migrations, and cloud platform security initiatives.
Partner with Basis, Functional, Audit, and Business teams throughout the SDLC.
Design and deliver SAP training programs and internal workshops to build organizational capability.
Provide clear documentation and knowledge transfer to support operational continuity.

Requirements

What you’ll need

12+ years of SAP Security and Basis experience, with multiple full-lifecycle implementations.
Demonstrated leadership experience as SAP Security Lead on large-scale enterprise programs.
Hands-on expertise with GRC Tool such CPGRC, SAP GRC Access Control (Versions 10.x / 12.x) including ARM, EAM, UAR, and BRM.
Deep knowledge of SAP HANA Security, S/4HANA role architecture, and SAP Fiori authorization concepts.
Strong understanding of SOX ITGC controls, Segregation of Duties (SoD) principles, and audit evidence requirements.
Experience with S/4HANA upgrades.
Proficiency with PFCG, SU25, SUIM, and related SAP security administration tools.
Familiarity with SAP Cloud security and authorization group design.

Benefits

Comp & perks

medical
dental
vision
life insurance
disability insurance
vacation
401k
equity program