Cyber - SAP Security and GRC Access & Process Control Manager

Deloitte France; United States; On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte Cyber invites an Engineering Manager II to lead SAP security and GRC implementations across client environments. You will design security controls for S/4HANA, Fiori, Ariba, and related SAP platforms while guiding governance and compliance efforts.

Preferred candidates have 8+ years of SAP security/GRC experience, strong project leadership, and ability to travel. This role supports Deloitte's Enterprise Security offerings across complex technology landscapes.

Qualifications

• Bachelor's degree required in a relevant field.
• 8+ years of experience with SAP S/4HANA security and GRC Access Control.
• 3+ full-cycle SAP GRC Access Control implementations and 2+ Process Control implementations.
• 5+ years designing and implementing GRC components (ARA, ARM, EAM, BRM).
• Willingness to travel ~50%.

Responsibilities

• Lead SAP ECC and SAP S/4HANA security assessments and implementations.
• Design and deploy security roles across SAP platforms including Fiori, Ariba, IBP, BTP, and BDC.
• Configure SAP GRC Access Control and Process Control capabilities.
• Advise on SAP security role design, SOX ADR, and regulatory controls.
• Manage project workstreams and client stakeholders.

Skills

SAP S/4HANA security

SAP GRC Access Control

GRC Process Control

Security design & deployment

Project leadership

Travel readiness

Team collaboration

Education

Bachelor's degree

Tools

Onapsis

NextLabs

SAP Identity & Access Governance

Job description

SAP Security and GRC Manager / Engineering Manager IIOur Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.Recruiting for this role ends on 12/31/2026.Work you'll doAs an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

• Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
• Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
• Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
• Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
• Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

The team

Deloitte’s Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

• Bachelor's degree
• 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
• 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
• Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
• 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
• Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred:

• Previous consulting experience
• Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
• Experience with SAP identity and access governance
• Experience with cloud security and cloud migrations
• Experience with SAP business process controls and data protection tools such as NextLabs
• Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.