SAP Security Operations Lead

Description :

As the SAP Security Operations Lead, this person will take ownership of the SAP application security steady-state, business as usual (BAU) support in the Digital Core SAP landscape (including SAP S/4HANA and cloud / BTP environments).

This includes security operations (incident and change management), security audit / patching, and minor enhancements.

As the Digital Core build and deployment work will continue through multiple releases and deployments over the next several years, a key component of the SAP Security Operations Senior

Leads role will be ongoing coordination with the Digital Core SAP Security Project / Delivery

Teams on transitioning security work from project to BAU and ensuring that project and support

work dependencies are considered when it comes to key areas such as user access management,

role design, and role change management.

The SAP Security Operations Lead will also work closely with the existing SAP Security Operations

Senior Lead to ensure process consistency and collaborate on process improvements.

What are we looking for ?

- 8+ years of SAP security experience with deep understanding of SAP application security, IT controls, role-based access strategies, segregation of duties, identity and access management (user provisioning, user access reviews, user terminations), single-sign on, data security, security monitoring and vulnerability management

- Deep experience with security design and build in SAP technologies including SAP S/4HANA, Fiori, SAP Master Data Governance (MDG), SAP BTP, SAP GRC Access Control (user access requests, segregation of duties, Firefighter / emergency access)

- Strong understanding IT audit methodologies and relevant experience participating in the end to-end SAP audit lifecycle

- Experience leading global / decentralized managed services support teams and having responsibilities for managing ticket queues and metrics reporting with an IT Service

- Management (ITSM) is a must.

- ServiceNow experience is preferred.

- Strong communication skills, fluent in written and spoken English, ability to discuss security topics tailored to technical, business, and leadership level audiences.

- Ability to form strong working relationships with internal Associates and external partners

across multiple organizations, including audit stakeholders.

- Flexible work hours to provide adequate overlap and coverage with a portion of US business

hours

What will be the roles key responsibilities ?

- Lead the Digital Core SAP Security Operations Team by providing technical and process expertise, coordinating responses and cross-team collaboration for complex issues, and serving as a point of escalation.

- Incident and Change Management : Accountable for tracking the teams performance metrics and ensuring targets for response and resolution times are being met for security items such as security incidents / issues, requests for information, access provisioning requests security role change requests.

- Audit and IT Controls : Owns the operation of IT controls in the Digital Core SAP system landscape. Responsible for overseeing the team members performing the controls, coordinating evidence requests with IT audit team and external audit contacts, and signing off on evidence. Identify and address potential or actual controls SAP Patching : Track patching metrics and work with other teams (including SAP, in their capacity as managing RISE infrastructure) responsible for analyzing SAP patches and providing guidance in the areas of impact analysis, testing, and documentation.

- Continuously identify opportunities for process improvements (e.g., automations, standardization), provide recommendations, and deliver process improvements to further mature security, compliance, and efficiency in the Digital Core SAP landscape.

- Coordinate with the SAP security project leads to ensure project teams are following security standards and processes, and to ensure completeness of training and knowledge transfer from project teams to SAP Security Operations Team.

- Create, review, and maintain security documentation

- Collaborate with our vendors and external consulting partners; oversee contractors and review

their work products / deliverables.

(ref:hirist.tech)