SAP Security SOX Specialist

Amrize; Bogotá; On-site; COP 190,967,000 - 286,451,000; Full time

Benefits offered by this job

3 extra-legal bonuses per year (equiv.

Performance-based bonuses possible

Job summary

Amrize is seeking a seasoned SAP security and IT compliance professional to lead SOX-related controls and evidence across SAP environments in Bogotá. You will drive ITGCs, UAR/PUAR campaigns, and remediation, with a focus on S/4HANA and GRC. Strong communications and stakeholder coordination are essential.

This role supports audit readiness and collaborates with the SOX Lead to ensure timely and accurate control documentation and responses to audits.

Qualifications

• 5+ years of experience in SAP security, access governance, or IT compliance within a SOX-controlled environment.
• Working knowledge of ITGCs, segregation of duties, access reviews, and audit documentation.
• Ability to assess evidence, identify control gaps, and manage remediation follow-up.
• Strong written communication, organization, and stakeholder coordination skills.
• Experience with SAP GRC and S/4HANA is preferred.
• 3 extra-legal bonuses per year, equivalent to one monthly salary each.

Responsibilities

• Execute yearly, quarterly, and monthly IT General Controls (ITGCs), maintaining complete, accurate, and timely evidence.
• Handle User Access Review (UAR) and Privileged User Access Review (PUAR) campaigns, including preparation, reviewer coordination, progress tracking, escalation, and closure.
• Track access review decisions and verify that required remediation is completed and documented.
• Provide compliance support for S/4HANA, including control requirements, access governance, and audit evidence.
• Coordinate responses to internal and external audit requests.
• Identify control GAPs, track corrective actions, and elevate overdue items to the SAP SOX Lead.

Skills

SAP Security

Access Governance

IT Compliance

ITGCs

SOX

Audit Documentation

S/4HANA

GRC

Stakeholder Coordination

Written Communication

Tools

SAP GRC

S/4HANA

Job description

Amrize is building North America. From bridges and railways to data centers, schools, offices, and homes, our solutions are inside the buildings and infrastructure that connect people and improve the way we live. As the partner of choice for professional builders, we offer advanced, branded solutions from foundation to rooftop. No matter where our customers are and what their jobs are, we’re ready to deliver. Our 19,000 colleagues work across 1,000 sites supported by an unparalleled distribution network. We’re involved in every construction market: infrastructure, commercial, residential, new build, repair, and refurbishment. Amrize is listed on the New York Stock Exchange and the SIX Swiss Exchange as of June 23, 2025, following our spinoff as an independent company.

Role Summary:

Execute SAP compliance activities and maintain audit readiness through detail-oriented control execution, access governance, and complete supporting evidence. Support the SOX Lead in meeting control obligations and addressing compliance requirements across the SAP environments.

Key Responsibilities:

• Execute yearly, quarterly, and monthly IT General Controls (ITGCs), maintaining complete, accurate, and timely evidence.
• Handle User Access Review (UAR) and Privileged User Access Review (PUAR) campaigns, including preparation, reviewer coordination, progress tracking, escalation, and closure.
• Track access review decisions and verify that required remediation is completed and documented.
• Provide compliance support for S/4HANA, including control requirements, access governance, and audit evidence.
• Coordinate responses to internal and external audit requests.
• Identify control GAPs, track corrective actions, and elevate overdue items to the SAP SOX Lead.

Requirements:

• At least 5 years of experience in SAP security, access governance, or IT compliance within a SOX-controlled environment.
• Working knowledge of ITGCs, segregation of duties, access reviews, and audit documentation.
• Ability to assess evidence, identify control gaps, and manage remediation follow-up.
• Strong written communication, organization, and stakeholder coordination skills.
• Experience with SAP GRC and S/4HANA is preferred.
• 3 extra-legal bonuses per year, equivalent to one monthly salary each