Associate Manager - SAP-SAP Security

Bristlecone; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Bristlecone is seeking an Associate Manager - SAP Security to lead security strategy and execution for complex SAP modernization projects in Bengaluru. You will guide cross-functional teams through risk assessments, role design, authorizations, and compliance to ensure secure SAP solutions.

You will mentor security consultants, manage stakeholder communications with senior leadership, and drive ongoing improvements, including SAP GRC, SOX, GDPR compliance and incident response readiness.

Qualifications

• 10+ years of hands-on SAP Security experience including GRC and compliance.
• Subject-matter expert on SAP security implementations and modernizations.
• Strong knowledge of SAP S/4HANA, ECC, SAP Cloud Platform and related security frameworks.
• Experience leading security design and delivery for large-scale SAP transformations.
• Excellent communication and stakeholder management; certifications preferred.

Responsibilities

• Define and enforce SAP security policies, standards, and best practices across modernization projects.
• Lead end-to-end SAP authorizations design, testing, and rollout for S/4HANA, ECC, and cloud extensions.
• Conduct security risk assessments, gap analyses, and remediation planning for SAP landscapes.
• Collaborate with functional and technical teams to embed security controls into solution designs.
• Mentor and coach junior security consultants, fostering knowledge transfer and skill development.
• Manage stakeholder communication, presenting security findings and recommendations to senior leadership.
• Oversee compliance audits (GRC, SOX, GDPR) and ensure timely remediation of findings.
• Drive continuous improvement initiatives, leveraging automation and emerging security tools.
• Support incident response and forensic investigations for SAP security events.
• Stay current with SAP security updates, patches, and industry trends to advise the delivery organization.

Skills

SAP Security

GRC

SOX

CISSP / CISA

S/4HANA Security

Role design & authorizations

Security risk assessments

Stakeholder management

Mentoring

Cloud security

Education

Bachelor's degree in Computer Science, Information Security, or related field

Master’s degree in IT/Security (preferred)

Job description

Job Description

The Associate Manager - SAP Security will drive the security strategy and execution for complex SAP modernization projects. Reporting to the Delivery Head, you will act as the subject‑matter expert, guiding cross-functional teams through risk assessments, role design, authorizations, and compliance while ensuring seamless integration of new SAP solutions into the enterprise environment.

Job Description

The Associate Manager - SAP Security will drive the security strategy and execution for complex SAP modernization projects. Reporting to the Delivery Head, you will act as the subject‑matter expert, guiding cross-functional teams through risk assessments, role design, authorizations, and compliance while ensuring seamless integration of new SAP solutions into the enterprise environment.

Responsibilities

• Define and enforce SAP security policies, standards, and best practices across modernization projects.
• Lead end‑to‑end SAP authorizations design, testing, and rollout for S/4HANA, ECC, and cloud extensions.
• Conduct security risk assessments, gap analyses, and remediation planning for SAP landscapes.
• Collaborate with functional and technical teams to embed security controls into solution designs.
• Mentor and coach junior security consultants, fostering knowledge transfer and skill development.
• Manage stakeholder communication, presenting security findings and recommendations to senior leadership.
• Oversee compliance audits (GRC, SOX, GDPR) and ensure timely remediation of findings.
• Drive continuous improvement initiatives, leveraging automation and emerging security tools.
• Support incident response and forensic investigations for SAP security events.
• Stay current with SAP security updates, patches, and industry trends to advise the delivery organization.

Qualifications

• 10+ years of hands‑on experience in SAP Security, including authorizations, GRC, and compliance.
• Proven track record as a subject‑matter expert on SAP security implementations and modernizations.
• Deep knowledge of SAP S/4HANA, ECC, SAP Cloud Platform, and related security frameworks.
• Experience leading security design and delivery for large-scale SAP transformation projects.
• Strong understanding of SAP GRC modules, role-based access control, and segregation of duties.
• Excellent communication and stakeholder management skills, with ability to influence senior leadership.
• Relevant certifications (e.g., SAP Certified Technology Associate – Security, CISA, CISSP) preferred.
• Demonstrated ability to mentor teams and drive knowledge‑sharing initiatives.
• Analytical mindset with strong problem‑solving capabilities in complex SAP environments.
• Bachelor’s degree in Computer Science, Information Security, or related field; Master’s degree is a plus.

About Us

Bristlecone is the leading provider of AI-powered application transformation services for the connected supply chain. We empower our customers with speed, visibility, automation, and resiliency - to thrive on change.

Our transformative solutions in Digital Logistics, Cognitive Manufacturing, Autonomous Planning, Smart Procurement and Digitalization are positioned around key industry pillars and delivered through a comprehensive portfolio of services spanning digital strategy, design and build, and implementation across a range of technology platforms.

Bristlecone is ranked among the top ten leaders in supply chain services by Gartner. We are headquartered in San Jose, California, with locations across North America, Europe and Asia, and over 2,500 consultants. Bristlecone is part of the $19.4 billion Mahindra Group.

Equal Opportunity Employer

Bristlecone is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status .

Information Security Responsibilities

• Understand and adhere to Information Security policies, guidelines and procedure, practice them for protection of organizational data and Information System.
• Take part in information security training and act while handling information.
• Report all suspected security and policy breach to InfoSec team or appropriate authority (CISO).
• Understand and adhere to the additional information security responsibilities as part of the assigned job role.