Chief Security Architect (m/f/d) Cryptography

We help the world run better

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

Cryptography is the cornerstone of information security and compliance. SAP is committed to meeting and exceeding our customers' expectations by ensuring the use of state-of-the-art cryptographic functions and libraries. We are preparing for the future by staying ahead of the rapidly evolving field of quantum computing, which will disrupt the use of all current public key algorithms. As the issue crosses technologies, platforms, and products, we are establishing a centralized Cryptography Center of Excellence (CCoE) within SAP’s Global Security and Cloud Compliance organization. This will drive company-wide initiatives around crypto agility and applied cryptography.

What you’ll do

As Chief Security Architect (m/f/d) Cryptography, you will play a pivotal role in the establishment and leadership of the CCoE. You will spearhead initiatives related to cryptographic functions, libraries, and solutions to ensure that our offerings meet the specialized needs of our diverse customer base. This is a unique opportunity to influence and transform SAP's approach to cryptography across technologies, platforms, and products.

• Understand customer security and cryptographic requirements, as well as industry and regional cryptographic needs, and translate them into actionable concepts.
• Monitor and assess emerging cryptographic threats, including quantum threats, and prepare SAP's cryptographic systems accordingly.
• Serve as the visionary for applied cryptography at SAP, setting strategic direction and fostering innovation across the organization.
• Drive customer satisfaction by addressing top crypto related concerns like corporate key management, Bring/Hold Your Own Key (BYOK / HYOK), Hardware Security Module (HSM) support for root keys/secrets, cryptographic token support for password-less authentication, and confidential computing support.
• Define SAP’s cryptographic strategy, emphasizing agility in adapting to new challenges and technologies. Lead its implementation across the SAP ecosystem.
• Collaborate with cross-functional teams to ensure that cryptographic solutions meet customer needs and regulatory requirements.
• Drive innovation in applied cryptographic methodologies, protocols, and algorithms to enhance SAP’s security posture.
• Create executable architecture and development concepts using state-of-the-art cryptographic concepts and libraries.
• Work on concepts to increase cryptographic agility and foster the use of validated cryptographic libraries, including the NIST FIPS 140-3 standard.
• Serve as a subject matter expert in applied cryptography, providing guidance and expertise to stakeholders and product development across the organization.

What you bring

• Advanced degree in computer science, cryptography, information security, or a related field.
• 5-7+ years of IT security and cryptography experience.
• Demonstrated experience in leading cryptography projects and teams within a large organization.
• Deep technical expertise in cryptography, including algorithms, protocols, and systems.
• Strong understanding of the impact of quantum computing on cryptographic systems and proactive strategies to address these threats.
• Familiarity with global regulatory requirements and standards related to cryptography and information security, such as NIST FIPS 140-3.
• Understanding and experience with SAP development and architecture (cloud) frameworks.
• Ability to create understandable and executable security and cryptographic library concepts in standard SAP development frameworks and technology stacks.
• Experience with cloud security design and implementation.
• Excellent communication and stakeholder management skills.
• Fluent in written and spoken English, German a plus.