SAP Security Manager

SSAB; Luleå kommun; On-site; SEK 900,000 - 1,200,000; Full time

Job summary

SSAB in Sweden invites an experienced SAP Security Manager to strengthen governance across our SAP landscape. You will own security architecture, risk management, and compliance for SAP applications while collaborating with Global Security and Group IT.

You will drive security strategy, oversee role design, access governance, and SoD, and guide major transformation programs with secure-by-design practices in a manufacturing context.

Qualifications

• Extensive 10+ years in cybersecurity in industrial/manufacturing sectors.
• Hands-on SAP security experience in complex environments, SAP S/4HANA preferred.
• Knowledge of IT/OT convergence and pragmatic security improvements.
• Expertise in SAP security architecture, roles, access governance, and SoD.
• Experience with SecurityBridge or equivalent SAP security platforms.
• Familiarity with ISO 27001, NIST CSF, GDPR and related certifications (CISSP, CISM, CRISC, AAISM).
• Experience leading large SAP transformation or ERP modernization.
• Strong stakeholder relationships and adoption of cybersecurity practices.
• Fluent in English.

Responsibilities

• Own SAP cybersecurity governance and security architecture across the SAP landscape.
• Define and maintain SAP security strategy, standards, controls, and operating model.
• Lead SAP security roadmap including risk management, compliance, and audits.
• Own SAP authorization concepts, role models, and SoD controls.
• Lead identity lifecycle and access governance processes.
• Provide security guidance for major transformation programs and secure-by-design principles.
• Develop roadmap for SAP and OT cybersecurity governance for IT/OT convergence.
• Support vulnerability management and risk remediation across SAP platforms.

Skills

Cybersecurity governance

Security architecture

Risk management

Access governance

Privileged access management

Segregation of Duties controls

Stakeholder management

English proficiency

Tools

SecurityBridge

Job description

Job Description

Cybersecurity is a critical enabler of SSAB's business transformation journey, and we are now looking for an experienced SAP Security Manager to strengthen the security of our growing SAP landscape and take ownership of cybersecurity governance, security architecture, and risk management across our SAP applications while helping shape the future security of integrated business and manufacturing environments.

Cybersecurity is a critical enabler of SSAB's business transformation journey, and we are now looking for an experienced SAP Security Manager to strengthen the security of our growing SAP landscape and take ownership of cybersecurity governance, security architecture, and risk management across our SAP applications while helping shape the future security of integrated business and manufacturing environments.

You will join SSAB's Group IT team, working closely with colleagues responsible for SAP Technical and Security Operations while bringing a dedicated cybersecurity perspective that helps ensure cybersecurity is embedded into decisions, designs, and processes from the start. You will also be working closely with a global team of experts from Group Security and Division IT, where your role will be critical in building strong relationships and driving collaboration with security stakeholders across the organization.

You will play a central role in our strategic transformation initiatives working closely with business process owners, architects, manufacturing operations, engineering teams, and external partners. You will drive security governance across business-critical SAP processes, integrations, and connected systems making this a unique opportunity to influence future cybersecurity direction of a global industrial organization.

Main Responsibilities

• Own SAP cybersecurity governance and security architecture across the SAP landscape ensuring our SAP solutions comply with internal security requirements, regulatory obligations, and customer expectations
• Define and maintain and continuously improve SAP security strategy, standards, controls and operating model, establishing a scalable and sustainable security foundation across the SAP ecosystem in collaboration with Cybersecurity Architect, platform owners, and IT and engineering teams
• Lead the development of SSAB's SAP security roadmap including SAP security risk management, compliance activities, and audit coordination and drive security reviews of SAP integrations and connected business-critical systems
• Own and evolve SAP authorization concepts, role models, privileged access management processes, and Segregation of Duties controls
• Lead identity lifecycle and access governance processes, ensuring effective user provisioning, access reviews, privileged access management, and SoD compliance
• Provide security expertise and guidance for major transformation programs, ensuring secure-by-design principles are embedded throughout SAP initiatives
• Develop the roadmap for SAP and OT cybersecurity governance and support secure IT/OT convergence across manufacturing environments
• Support vulnerability management, risk remediation, and continuous improvement initiatives across SAP platforms and connected systems acting as a subject matter expert and trusted advisor, helping stakeholders understand risks, priorities, and business impacts.

About You

• You have extensive work experience (typically 10+ years) within cybersecurity, information security, or related security disciplines from industrial manufacturing, engineering, automotive, metals, energy, or other production-intensive industries
• You have solid hands-on (at least 3-5 years) experience working with SAP security in complex enterprise environments, preferably SAP S/4HANA where integrations between enterprise applications and operational technology (OT) environments are key
• You are familiar with OT/industrial environments and cybersecurity challenges related to IT/OT convergence and know how to develop and implement pragmatic security improvements in complex operational settings
• You have strong knowledge of SAP security architecture, authorization concepts, role design, access governance, privileged access management, and Segregation of Duties controls
• You have proven experience operating or implementing SecurityBridge or equivalent SAP security platforms across vulnerability, threat, and code/change domains
• You have a solid understanding of security frameworks and audit standards (ISO 27001, NIST CSF, GDPR) and possess some cybersecurity certifications such as CISSP, CISM, CRISC, AAISM
• You come with experience playing a key role in large-scale SAP transformation or ERP modernization programs and can easily translate technical security requirements into clear and actionable guidance for technical and business stakeholders
• You are great a nurturing strong stakeholder relationship and driving adoption of cybersecurity practices across all our businesses
• You are fluent in English, both written and spoken

Recruitment process

• Apply
• Digital Interview
• Meet the Hiring Manager
• Meet the Team
• Pre-Offer Checks
• Sign!

If You Have Questions, Please Contact

Julia Källmar, Group Talent Acquisition Partner, [e-mail]

About Us

Becoming part of the SSAB family means joining a journey. A journey that we believe is essential for the sustainability of this planet. Steel has been one of the most important materials for developing our society and it will continue to be so. In the roofs over our heads, in the bridges connecting our cities and in the cars of tomorrow. At SSAB we are proud of our history and leadership in high-strength steel. But we are also aware that the production of steel is one of the largest emitters of greenhouse gases in the world. That has to change. That is why we have developed the world’s first fossil-free steel production and have committed to becoming largely fossil-free. As part of SSAB you will be instrumental in realizing this goal and pushing for the green transformation of the whole steel industry.