Manager, SAP Security and Controls

Clorox Company; Pleasanton (CA); Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Health plans

401(k) with company match

Flexible time off

Fertility/adoption benefits

Job summary

Clorox is seeking a Senior Manager, SAP Security & Controls to lead SAP Security, GRC, and Identity and Access Governance across the enterprise. You will shape strategy, oversee security architecture, and drive remediation and audit readiness in a global SAP footprint.

In this hybrid role, you will manage internal teams and partners, translate technical risks for senior leadership, and contribute to a practical SAP security roadmap, with a focus on S/4HANA, Fiori, and cloud identity integrations.

Qualifications

• Minimum 10+ years in SAP Security, GRC, and Identity governance in a large enterprise.
• Hands-on SAP Security and GRC with strategic architectural and delivery leadership.
• Deep knowledge of S/4HANA, Fiori security, and SAP GRC components.
• Experience with SOX/ITGC controls and audit remediation in global settings.

Responsibilities

• Own SAP SOX and ITGC control effectiveness, review evidence, and drive remediation.
• Diagnose and resolve complex authorization, role design, and GRC workflow issues.
• Define security architecture standards and multi-year roadmaps across SAP stack.
• Direct internal resources, MSPs, contractors, and partners; balance operations and projects.
• Govern access provisioning, access reviews, emergency access, and SoD governance.
• Translate risks for senior leadership and collaborate with cybersecurity and audit teams.

Skills

SAP Security

GRC

Identity & Access Governance

SOX control

Audit readiness

Leadership

S/4HANA security

Fiori security

PFCG

SU24

SoD rulesets

Access control

IAG

IAS

IPS

Cloud identity

Tools

S/4HANA

Fiori

PFCG

SU24

GRC Access Control

IAG

IAS

IPS

Job description

Your role at Clorox:

The Manager, SAP Security & Controls is accountable for SAP Security, Governance, Risk & Compliance (GRC), Identity and Access Governance, and SAP SOX control effectiveness across the enterprise. This senior technical leadership role combines deep hands‑on expertise with responsibility for security architecture, control assurance, service delivery, and the future SAP security roadmap.

The successful candidate will set strategy and architecture, lead internal and managed service resources, and remain personally engaged in complex SAP Security, GRC, identity, authorization, and control issues. This role is suited to a leader who can move confidently between senior stakeholder discussions, audit and control decisions, solution design, and detailed technical troubleshooting.

Success in this role means improving SAP control reliability and audit readiness, resolving complex security issues at their root cause, strengthening architecture and access governance, raising the quality and accountability of internal and managed service delivery, and advancing a practical future‑state SAP security roadmap. The ideal candidate has personally delivered complex SAP Security and GRC solutions, can lead SOX control execution and remediation, and can shape strategy without losing the ability to work at technical depth.

In this role, you will:

• Own SAP SOX and ITGC control effectiveness: execute and oversee assigned controls, review evidence quality, provide formal sign‑off, assess design and operating effectiveness, and drive sustainable remediation of deficiencies and repeat findings.
• Remain hands‑on: diagnose and resolve complex authorization, role design, GRC workflow, provisioning, Segregation of Duties, Firefighter, Fiori, cloud identity, and production security issues.
• Lead SAP security architecture: define standards, role and authorization models, design principles, and a multi‑year roadmap across ECC, S/4HANA, Fiori, BTP, GRC, IAG, IAS, IPS, and connected identity platforms.
• Lead delivery and priorities: direct internal resources, contractors, managed service providers, and strategic partners; balance operational support, audit commitments, remediation, projects, and modernization initiatives.
• Govern access and identity: lead access provisioning, User Access Reviews, Emergency Access Management, privileged access, role lifecycle, SoD rulesets, authentication, federation, and identity integration.
• Influence across the organization: translate technical and control risks for senior leadership and partner effectively with Cybersecurity, IAM, Internal and External Audit, Enterprise Architecture, SAP delivery teams, and business stakeholders.

What we look for:

• 10+ years of progressive SAP Security, GRC, and Identity and Access Governance experience, including substantial experience as a senior architect or technical lead in a complex enterprise SAP environment.
• Demonstrated hands‑on SAP Security and GRC expertise combined with strategic, architectural, and delivery leadership.
• Significant experience with S/4HANA security, role and authorization design, Fiori security, PFCG, SU24, and authorization troubleshooting and tracing.
• Deep working knowledge of SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, MSMP workflows, BRF+, mitigating controls, and SoD ruleset governance.
• Proven experience executing, reviewing, and remediating SAP SOX and ITGC controls and engaging with Internal and External Audit.
• Experience applying modern SAP identity capabilities, including IAG, IAS, and IPS, within enterprise access governance and provisioning architectures.
• Experience leading internal technical resources, managed service providers, contractors, and strategic partners.
• Ability to communicate clearly and operate effectively at technical, architectural, operational, audit, and senior leadership levels.
• Experience in a complex global organization with a significant SAP footprint and regulated financial controls environment is preferred.
• Experience with SAP BTP security, cloud identity integrations, control automation, and continuous monitoring is preferred.
• Demonstrated success leading major SAP transformations, role redesigns, audit remediation programs, or access governance modernization is preferred.
• Relevant SAP Security, GRC, cloud identity, cybersecurity, audit, or enterprise architecture certifications is preferred.

Workplace type:

Hybrid- 3 days in office; 2 days WFH

[U.S.]Additional Information:

At Clorox, we champion people to be well and thrive, starting with our own people. To help make this possible, we offer comprehensive, competitive benefits that prioritize all aspects of wellbeing and provide flexibility for our teammates’ unique needs. This includes robust health plans, a market‑leading 401(k) program with a company match, flexible time off benefits (including half‑day summer Fridays depending on location), inclusive fertility/adoption benefits, and more.

We are committed to fair and equitable pay and are transparent with current and future teammates about our full salary ranges. We use broad salary ranges that reflect the competitive market for similar jobs, provide sufficient opportunity for growth as you gain experience and expand responsibilities, while also allowing for differentiation based on performance. Based on the breadth of our ranges, most new hires will start at Clorox in the first half of the applicable range. Your starting pay will depend on job‑related factors, including relevant skills, knowledge, experience and location. The applicable salary range for every role in the U.S. is based on your work location and is aligned to one of three zones according to the cost of labor in your area.

–Zone A: $131,200 - $258,500

–Zone B: $120,300 - $237,000

–Zone C: $109,400 - $215,500

All ranges are subject to change in the future. Your recruiter can share more about the specific salary range for your location during the hiring process.

This job is also eligible for participation in Clorox’s incentive plans, subject to the terms of the applicable plan documents and policies.

Our values-based culture connects to our purpose and empowers people to be their best, professionally and personally. We serve a diverse consumer base which is why we believe teams that reflect our consumers bring fresh perspectives, drive innovation, and help us stay attuned to the world around us. That’s why we foster an inclusive culture where every person can feel respected, valued, and fully able to participate, and ultimately able to thrive. Learn more .

#LI-HYBRID