Manager, SAP Security and Controls

Clorox Company; Durham (NC); Hybrid; USD 120,000 - 237,000; Full time

Benefits offered by this job

Health plans

401(k) match

Flexible time off

Fertility/adoption benefits

Job summary

Clorox Company is seeking a Manager of SAP Security & Controls to lead governance, risk, and access governance across the enterprise. This role combines hands-on SAP security expertise with strategic architecture and a multi-year roadmap for S/4HANA, Fiori, and cloud identity.

The ideal candidate will drive SOX and ITGC control execution, strengthen access governance, and align security with business objectives while leading internal and managed service resources.

Qualifications

• Extensive SAP Security, GRC, and Identity and Access Governance experience.
• Hands-on SAP Security and GRC expertise with strategic and delivery leadership.
• S/4HANA security, role design, Fiori security, PFCG, SU24 troubleshooting.
• Deep knowledge of SAP GRC Access Control and SoD governance.
• Experience executing and remediating SAP SOX and ITGC controls and working with audits.

Responsibilities

• Own SAP SOX and ITGC control effectiveness; oversee controls and evidence; drive remediation of deficiencies.
• Diagnose and resolve complex authorization, role design, GRC workflow, provisioning, and production security issues.
• Define standards and roadmaps for SAP security architecture across ECC, S/4HANA, Fiori, BTP, GRC, and related platforms.
• Direct internal resources, contractors, and partners; balance support, remediation, projects and modernization.
• Lead access provisioning, reviews, Emergency Access Management, and SoD rule governance.
• Translate technical risks for senior leadership and collaborate with Cybersecurity, IAM, Audit, and Enterprise Architecture.

Skills

SAP Security

GRC

Identity & Access Governance

S/4HANA security

Fiori security

PFCG & SU24 troubleshooting

SoD governance

SOX/ITGC controls

Cloud identity integrations

Leadership & engagement

Tools

SAP GRC

BRF+

MSMP workflows

Job description

The Manager, SAP Security & Controls is accountable for SAP Security, Governance, Risk & Compliance (GRC), Identity and Access Governance, and SAP SOX control effectiveness across the enterprise. This senior technical leadership role combines deep hands-on expertise with responsibility for security architecture, control assurance, service delivery, and the future SAP security roadmap.

The successful candidate will set strategy and architecture, lead internal and managed service resources, and remain personally engaged in complex SAP Security, GRC, identity, authorization, and control issues. This role is suited to a leader who can move confidently between senior stakeholder discussions, audit and control decisions, solution design, and detailed technical troubleshooting.

Success in this role means improving SAP control reliability and audit readiness, resolving complex security issues at their root cause, strengthening architecture and access governance, raising the quality and accountability of internal and managed service delivery, and advancing a practical future-state SAP security roadmap. The ideal candidate has personally delivered complex SAP Security and GRC solutions, can lead SOX control execution and remediation, and can shape strategy without losing the ability to work at technical depth.

In this role, you will:

• Own SAP SOX and ITGC control effectiveness: execute and oversee assigned controls, review evidence quality, provide formal sign-off, assess design and operating effectiveness, and drive sustainable remediation of deficiencies and repeat findings.
• Remain hands-on: diagnose and resolve complex authorization, role design, GRC workflow, provisioning, Segregation of Duties, Firefighter, Fiori, cloud identity, and production security issues.
• Lead SAP security architecture: define standards, role and authorization models, design principles, and a multi-year roadmap across ECC, S/4HANA, Fiori, BTP, GRC, IAG, IAS, IPS, and connected identity platforms.
• Lead delivery and priorities: direct internal resources, contractors, managed service providers, and strategic partners; balance operational support, audit commitments, remediation, projects, and modernization initiatives.
• Govern access and identity: lead access provisioning, User Access Reviews, Emergency Access Management, privileged access, role lifecycle, SoD rulesets, authentication, federation, and identity integration.
• Influence across the organization: translate technical and control risks for senior leadership and partner effectively with Cybersecurity, IAM, Internal and External Audit, Enterprise Architecture, SAP delivery teams, and business stakeholders.

What we look for:

• 10+ years of progressive SAP Security, GRC, and Identity and Access Governance experience, including substantial experience as a senior architect or technical lead in a complex enterprise SAP environment.
• Demonstrated hands-on SAP Security and GRC expertise combined with strategic, architectural, and delivery leadership.
• Significant experience with S/4HANA security, role and authorization design, Fiori security, PFCG, SU24, and authorization troubleshooting and tracing.
• Deep working knowledge of SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, MSMP workflows, BRF+, mitigating controls, and SoD ruleset governance.
• Proven experience executing, reviewing, and remediating SAP SOX and ITGC controls and engaging with Internal and External Audit.
• Experience applying modern SAP identity capabilities, including IAG, IAS, and IPS, within enterprise access governance and provisioning architectures.
• Experience leading internal technical resources, managed service providers, contractors, and strategic partners.
• Ability to communicate clearly and operate effectively at technical, architectural, operational, audit, and senior leadership levels.
• Experience in a complex global organization with a significant SAP footprint and regulated financial controls environment is preferred.
• Experience with SAP BTP security, cloud identity integrations, control automation, and continuous monitoring is preferred.
• Demonstrated success leading major SAP transformations, role redesigns, audit remediation programs, or access governance modernization is preferred.
• Relevant SAP Security, GRC, cloud identity, cybersecurity, audit, or enterprise architecture certifications is preferred.

#LI-HYBRID

Workplace type:

Hybrid- 3 days in office; 2 days WFH

Our values-based culture connects to our purpose and empowers people to be their best, professionally and personally. We serve a diverse consumer base which is why we believe teams that reflect our consumers bring fresh perspectives, drive innovation, and help us stay attuned to the world around us. That’s why we foster an inclusive culture where every person can feel respected, valued, and fully able to participate, and ultimately able to thrive. Learn more.

[U.S.]Additional Information:

At Clorox, we champion people to be well and thrive, starting with our own people. To help make this possible, we offer comprehensive, competitive benefits that prioritize all aspects of wellbeing and provide flexibility for our teammates’ unique needs. This includes robust health plans, a market-leading 401(k) program with a company match, flexible time off benefits (including half-day summer Fridays depending on location), inclusive fertility/adoption benefits, and more.

We are committed to fair and equitable pay and are transparent with current and future teammates about our full salary ranges. We use broad salary ranges that reflect the competitive market for similar jobs, provide sufficient opportunity for growth as you gain experience and expand responsibilities, while also allowing for differentiation based on performance. Based on the breadth of our ranges, most new hires will start at Clorox in the first half of the applicable range. Your starting pay will depend on job-related factors, including relevant skills, knowledge, experience and location. The applicable salary range for every role in the U.S. is based on your work location and is aligned to one of three zones according to the cost of labor in your area.

–Zone A: $131,200 - $258,500

–Zone B: $120,300 - $237,000

–Zone C: $109,400 - $215,500

All ranges are subject to change in the future. Your recruiter can share more about the specific salary range for your location during the hiring process.

This job is also eligible for participation in Clorox’s incentive plans, subject to the terms of the applicable plan documents and policies.