Senior Manager — SAP GRC Solution Architect, Audit & Compliance Governance

Qualifications
Required
15+ years in SAP security and GRC, with at least 5 years in a solution architect or global leadership capacity.
Deep hands-on SAP GRC Access Control expertise — ARA, EAM, BRM, ARM — including ruleset design, workflow configuration, and connector architecture in production.
Expert-level S/4HANA authorization design: authorization objects, Fiori catalogs, groups and spaces, business roles, and the differences from classical ECC role design.
Proven ownership of SoD ruleset design and remediation on a global program, with demonstrated conflict reduction rather than documented conflict.
Strong SOX ITGC and application control experience in a publicly listed environment, with direct external audit engagement.
Demonstrated design of controls that are automated and continuously evidenced, not dependent on manual periodic execution.
Experience delivering security and controls through multi-wave global S/4HANA deployments, including cutover and hypercare
Ability to hold a control position under delivery pressure — the credibility to explain to a program leader why an exception costs more than the delay.
Preferred
SAP Identity Management, IAG, or third-party IAM integration (SailPoint, Saviynt, Okta).
SAP Process Control, Risk Management, or continuous control monitoring platforms.
RISE with SAP security and shared responsibility model experience
BTP security architecture, identity propagation, and authorization models
CISA, CISM, CRISC, or SAP security certification
Manufacturing or industrial sector control environment, including plant-level and trade compliance considerations.

Work arrangement
No