Information Security Compliance Expert

Sap Ns2; Herndon (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

SAP NS2 is seeking a senior leader to drive compliance strategy and governance across enterprise security programs. The role requires deep expertise in cybersecurity regulatory frameworks, audit leadership, and scalable control environments spanning cloud and AI governance.

You will mentor teams, influence stakeholders, and ensure alignment with DoD/Federal requirements. The position emphasizes cross-functional leadership without direct authority, building trust with customers and executives.

Qualifications

• In-depth knowledge of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks (FedRAMP, CMMC, ISO, RMF, SOC, DISA, NIST SPs).
• Ability to communicate orally and in writing at the senior level and shape executive briefings for leadership and customers.
• Experience with DoD/US federal agencies and intelligence community cyber security practices.
• Translate risk and complexity into clear business decisions for senior leaders and non-technical stakeholders.
• Engage with customers to address security and compliance needs; coordinate with internal experts for practical solutions.
• Review customer contracts for security compliance requirements.
• CISSP or other professional security certification.

Responsibilities

• Lead compliance programs and define enterprise control frameworks aligned with ISO 27001, NIST, and regulatory requirements.
• Establish continuous compliance capabilities with automated monitoring, risk scoring, and policy enforcement.
• Oversee cloud and AI governance including model risk management, data privacy, and security controls.
• Plan and execute audits, guide remediation, and mentor compliance professionals across the team.
• Influence across organizational lines to design and execute scalable compliance programs.

Skills

Cybersecurity strategy

Regulatory compliance

Audits & governance

Executive communications

FedRAMP/NIST/SOC

Customer engagement

Contract review

CISSP or equivalent

Job description

Job Description

What you'll bring

You have deep expertise in compliance strategy, audit leadership, and security governance at scale. Strong experience in cloud security, Zero Trust principles, IAM, and regulatory alignment is essential, and the ability to define frameworks, influence stakeholders, and advance enterprise-wide compliance maturity is critical. You've led audits end to end, mentored compliance professionals, and shaped how organizations interpret and meet security framework requirements.

What you'll build

You'll lead compliance programs and define enterprise control frameworks aligned with standards such as ISO 27001, NIST, and applicable regulatory requirements. Continuous compliance capabilities, including automated monitoring, risk scoring, and policy enforcement, are yours to establish and maintain. Cloud and AI governance, including model risk management, data privacy, and security controls, falls within your responsibility. You'll oversee audit planning and execution, guide remediation efforts, and mentor compliance professionals across the team.

Where you belong

You'll provide leadership across teams, shaping how compliance programs are designed and executed at SAP NS2. The work requires both deep subject matter expertise and the ability to influence people across organizational lines without always having direct authority. Fostering a culture of security, governance, and accountability is part of how success is measured at this level. If you've led compliance programs at enterprise scale and you're looking for broader organizational impact, this is the right fit.

Qualifications

• In-depth knowledge and understanding of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks. This includes, but not limited to, FedRAMP, CMMC, ISO, RMF, and SOC frameworks, DISA policies and NIST security special publications.
• Ability to communicate, both orally and in writing at the senior level.
• Shape executive briefings and decision materials for the SAP NS2 Board, Executive Leadership, Government Leaders and line of business reviews.
• Experience with Department of Defense / War, US Federal Agencies and Intelligence community cyber security practices.
• Ability to understand technical challenges and translate risk and complexity into clear business decisions for senior leaders, customers, and non-technical stakeholders.
• Ability to engage with customers, understanding and addressing their security and compliance needs; and as needed coordinate with internal experts to help shape practical solutions and build trust.
• Review of customer contracts for compliance with security offerings and requirements.
• CISSP or other professional security certification.

Additional Information

All your information will be kept confidential according to EEO guidelines.

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

We win with inclusion
SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: [e-mail].
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

Compensation Range Transparency
SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

AI Usage in the Recruitment Process
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
Please note that any violation of these guidelines may result in disqualification from the hiring process.

Company Description

SAP is the global market leader for business software and related services, and SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary, offering SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.

This position requires access to customer data; must be a U.S. citizen.

SAP NS2 does not offer Visa sponsorships for this role.

All internal must have manager’s approval to transfer.