ERP Security Lead

The Morganfield Group; Oregon; Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Travel reimbursement

Contractor-friendly terms (C2C or W2)

Phased engagement with clear start-dim

Job summary

The Morganfield Group is engaged in a multi-year ERP transformation with a focus on security and independent assurance for HR, payroll, and financial data. You will define and validate security requirements, ensure proper access governance, and coordinate testing and readiness activities across vendors and the client.

This role requires regulatory awareness and experience with government-related programs. Advisory, governance and phased engagement support will run from mid-2027 onward, with

Qualifications

• Experience in ERP security on government or regulated programs.
• Independent validation of security design and production readiness.
• Local-government experience preferred.

Responsibilities

• Define vendor-neutral security requirements for selection and design.
• Review access controls, duties segregation, and privileged accounts.
• Set data-handling, masking, and audit-evidence requirements.
• Coordinate security testing and production-readiness evidence.
• Document residual-risk decisions for client approval.

Skills

ERP security

Access design

Segregation of duties

Data protection

Independent validation

Education

CISSP/CISA credentials

Job description

TMG is assembling the key-personnel team for a prospective multi-year ERP transformation at a U.S. county government: HR, payroll, benefits, finance, budget, procurement and capital assets, moving off a legacy platform. TMG's proposed role is independent: strategy and business case, requirements, ERP vendor and systems-integrator selection, program governance, business readiness and assurance. The selected vendor and SI build, configure, convert and unit-test. Final responsibilities follow the approved statement of work.

The role

Lead security requirements and independent assurance for sensitive HR, payroll, finance and integration data throughout the transformation: vendor-neutral requirements for selection and design, access and segregation-of-duties review, data handling, security testing and production-readiness evidence.

What you will do

• Define vendor-neutral security and compliance requirements for selection and solution design with client IT and security owners.
• Review role-based access, segregation of duties, privileged and service accounts, integration identities and access-review controls.
• Set data-handling, masking, approved-transfer, environment-access and audit-evidence requirements.
• Coordinate security testing, remediation and production-readiness evidence with the client and the SI; support operational handover.
• Document residual-risk decisions for client security-owner acceptance.

Commitment and terms

Advisory involvement during vendor and integrator selection (Phase 2, from mid-2027, about 0.10 FTE); 0.30 FTE through solution design and build (from late 2027); 0.50 FTE through testing and go-live; 0.25 FTE in stabilization. This is contract consulting, contingent on contract award, client approval and a mutually agreed engagement. Staffing is phased and start dates are staggered from early 2027; continuous full-time work is not assumed. Work is remote for analysis and documentation, with occasional travel to Greensboro, North Carolina, for workshops, design sessions, test starts, rehearsals and cutover. Travel frequency is agreed before you accept.

About The Morganfield Group

The Morganfield Group helps organizations lead complex transformations: enterprise modernization, M&A integration and the recovery of critical programs. Founded in 2013, the firm pairs executive advisory with hands-on delivery leadership, serving executive teams, private-equity operating partners and portfolio companies facing significant change, delivery risk or gaps in transformation leadership. Engagements range from diagnostics and advisory to interim leadership and full program management.

Requirements

Experience we want to see

• ERP or cloud security on comparable government or regulated programs: access design, segregation of duties, privileged accounts and sensitive-data protection.
• Independent validation of a provider's security design and production readiness, with tested remediation and documented residual risk.
• CISSP, CISA or similar credentials and local-government experience preferred.

How we evaluate

For each role we compare two relevant projects where available: type and scale, your own authority and deliverables, phases completed, decisions you made and measurable results. Verified delivery evidence, sound independent judgment and practical lifecycle-cost reductions count for more than titles or certification lists. Every application is read by a person; there are no automatic cut-offs on years, degrees or certifications.

Independence and consent

You will be asked to disclose current ERP vendor or SI affiliations, referral fees or other financial interests that could bear on independent advice. We assess the actual conflict rather than screening out everyone with prior SI experience. Before any shortlisted candidate is named in a client proposal, TMG obtains explicit written permission and confirms role, availability and commitment. Applying does not authorize proposal inclusion. References are requested separately, with your permission.

Benefits

• Consulting rate agreed individually by role and phase.
• Client-site travel reimbursed at cost under the engagement's pre-approved travel terms.
• Phased commitment with written confirmation of start date, hours by phase and competing commitments.
• Engaged as a TMG employee or TMG subcontractor (individual) under a standard subcontract, confidentiality undertaking and insurance requirements.
• C2C or W2.
• Individual consultants only; no agencies or third-party submissions.
• U.S. work authorization required; no visa sponsorship for this engagement.