[Hiring] Senior Manager/Director SAP Security @Amrize

Role Description

We’re seeking a Sr Manager/Director SAP Security who’s ready to put your skills to work on projects that matter — and build a career with a company that’s building North America.

This role sits at the heart of the Cybersecurity organization. The Sr Manager/Director will own the SAP security and access governance strategy across the full SAP landscape, ensuring robust SOX compliance, while also providing strategic direction for the broader enterprise.

The ideal candidate brings 15+ years of hands-on SAP security depth - from role design and SoD rule set management to GRC operations and audit excellence.

The preferred locations are Chicago or Nashville. The position can also be remote as long as you are able to do the travel.

What You'll Accomplish

• Strategic Leadership & Team Management
  • Lead access governance activities including role design, user access reviews, Segregation of Duties assessments, risk remediation, access certifications and ongoing security compliance.
  • Act as a player-coach: provide hands-on SAP security guidance for complex role design, SoD, and GRC challenges.
  • Own demand management, prioritization, and resource planning across both SAP Operations, SOX initiatives, S/4 Hana implementations, and upgrades.
  • Own all SAP controls supporting SOX compliance (ITGCs and application-level access controls).
  • Serve as the primary liaison for internal and external auditors on SAP access and security topics.
  • Translate technical SAP controls into clear, business-aligned compliance narratives.
  • Ensure high-quality, consistent audit evidence and drive remediation of any audit findings.
  • Lead end-to-end SoD governance including definition, maintenance, and enforcement of SoD rule sets.
  • Identify and document mitigating controls for approved SoD conflicts; own ongoing monitoring.
  • Drive periodic access reviews and certification campaigns aligned to SOX requirements.
• Role Design & RBAC
  • Govern and evolve the enterprise SAP role catalog including business roles and single roles.
  • Lead transformation toward modern role-based and attribute-based access control (RBAC/ABAC) models.
  • Define and enforce role design standards, naming conventions, and governance frameworks.
  • Manage the full role lifecycle: design, testing, deployment, and ongoing maintenance.
• SAP GRC & Operations
  • Provide end-to-end ownership of SAP security across S/4HANA, ECC, BTP, and Fiori landscapes.
  • Oversee SAP GRC implementation and optimization: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Process Control.
  • Drive standardization, automation, and efficiency in day-to-day SAP security operations.
  • Manage transport security (STMS) implications and security patching cadence.
  • Experience with constructing and presenting SAP Security, GRC, and SOX initiatives roadmap to C Suite.
  • Serve as a trusted advisor to senior leadership, IT, Finance, and business teams on SAP security, GRC and SOX Initiatives.
  • Demonstrate a commitment to communicating, improving and adhering to health, safety and environmental policies in all work environments and areas. Promote a culture of safety and exhibit these behaviors.

Qualifications

• Bachelor's degree
• Master's degree (preferred)
• Field of Study Preferred: Information security, Computer Science, Finance, or related field required

Requirements

• 15+ years in SAP Security, SAP GRC, and bolt on apps, with the majority of tenure in hands-on SAP security roles and GRC 10.1/12.0, including implementation experience with all GRC Access Control Modules.
• Big 4 experience strongly preferred.
• Extensive experience delivering SAP Security and Authorization solutions across complex SAP environments, with strong expertise in SAP S/4HANA Security, Role Design and Authorization Concepts, and SAP Security Roles and Authorizations.
• Deep hands-on knowledge of SAP user administration, authorization objects, landscape security, and GRC MSMP/BRF+ configurations.
• 5+ years in leadership roles managing teams and programs; experience leading both SAP and Governance initiatives.
• Proven capability engaging business and technical stakeholders, conducting access and risk assessments, resolving security issues, and producing high-quality security design, governance and compliance documentation.
• Experience supporting SAP transformation and cloud adoption programs across SAP S/4HANA and SAP BTP environments.
• Experience with Licensing Optimization in SAP S/4 Cloud Instances.
• Experience with Cross-System Risk Analysis and Ruleset construction from Scratch.

Benefits

• Competitive salary
• Retirement Savings: Choose from 401(k) pre-tax and/or Roth after-tax savings
• Employee Stock Purchase Plan
• Medical, Dental, Disability and Life Insurance
• Holistic Health & Well-being programs
• Health Savings Accounts (HSAs) & Flexible Spending Accounts (FSAs) for health and dependent care
• Vision and other Voluntary benefits and discounts
• Paid time off & paid holidays
• Paid Parental Leave (maternity & paternity)
• Educational Assistance Program
• Dress for your day