Principal Engineer, Security & Compliance

Nike; Beaverton (OR); On-site; USD 180,000 - 240,000; Full time

Job summary

NIKE Technology seeks a Principal SAP Application Security Engineer to own and drive NIKE's SAP security strategy across global platforms. You will lead roadmap development, manage a Master Service Partner, and partner with SAP to influence product security enhancements.

Requires 13+ years in SAP Security with 5+ full cycle implementations, deep GRC experience, and CISSP/CISA/CERT certifications. This role combines strategic leadership with hands-on technical delivery in a fast-paced, global

Qualifications

• 13+ years experience in SAP Security with at least five full cycle implementation/upgrade projects.
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration
• Bachelor's Degree in Computer Science or related field
• Credible certification in the relevant field is preferred
• Experience in a consulting services firm or similar delivery model

Responsibilities

• Create, drive and own NIKE's SAP Multi-year Security strategy, Develop Roadmaps aligning with industry best practices and NIKE Corporate Information Security framework.
• Manage a Master Service Partner to execute and deliver the SAP Security strategy.
• Lead the delivery of work during quarterly planning workshops aligning the work to existing priorities in accordance with the strategy, roadmap and business requirements.
• Research and implement leading technology solutions to protect data, comply with global regulations
• Work with business to create Risk Control Matrix, Design GRC risks, and Segregation of Duties ruleset
• Partner with SAP AG to influence product enhancements/roadmaps to align newer technologies with evolving Security best practices
• Partner with NIKE Corporate Information Security, Finance Governance & Controls, Internal Controls, Global Risk Management teams to develop a Secure and Compliant SAP Security framework
• Partner with Corporate Information Security to have a solid governance process for Critical SAP Security patches in accordance with NIST

Skills

SAP Security

SAP GRC

CISSP

CISA

Certification

Education

Bachelor's Degree in Computer Science

Tools

SAP GRC Access Control

GRC Tools

Job description

NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data, and providing leading-edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport. We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally. Our teams are innovative, diverse, multidisciplinary, and collaborative, taking technology into the future and bringing the world with it

Who We Are Looking For

We are looking for a Principal SAP Application Security Engineer at NIKE Technology. Your role on the team will be to own, design, and manage a competitive application security strategy, and drive best practices. This is a critical role within the organization that will enable tools and processes in the delivery of technology that will transform our application security solutions. You will work in close partnership with other leaders throughout NIKE to ensure we embrace industry-leading innovations, trends, transformations and support strategic priorities for NIKE's rapidly growing business. This position will require that you bring a strong background in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job."

What You Will Work On

This role will be performing these key tasks:

• Create, drive and own NIKE's SAP Multi-year Security strategy, Develop Roadmaps aligning with industry best practices and NIKE Corporate Information Security framework.
• Manage a Master Service Partner to execute and deliver the SAP Security strategy.
• Lead the delivery of work during quarterly planning workshops aligning the work to existing priorities in accordance with the strategy, roadmap and business requirements.
• Research and implement leading technology solutions to protect data, comply with global regulations
• Work with business to create Risk Control Matrix, Design GRC risks, and Segregation of Duties ruleset
• Partner with SAP AG to influence product enhancements/roadmaps to align newer technologies with evolving Security best practices
• Partner with NIKE Corporate Information Security, Finance Governance & Controls, Internal Controls, Global Risk Management teams to develop a Secure and Compliant SAP Security framework
• Partner with Corporate Information Security to have a solid governance process for Critical SAP Security patches in accordance with NIST
• Technical knowledge and proven experience in communicating with both highly technical audiences and non-highly technical audiences
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences
  
  

Who You Will Work With

You will work in close partnership with other leaders throughout NIKE's technical and business community to ensure NIKE Technology embraces industry-leading innovations, trends, and transformations and accelerates and supports business strategies and priorities for NIKE’s rapidly growing business. This position will require that you bring a strong background in in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job".

What You Bring

• Bachelor's Degree in Computer Science or a related field experience. Will accept any suitable combination of education, experience or training.
• 13+ years experience in SAP Security with at least five full cycle implementation/upgrade projects
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration
• A solid background in a consulting services firm or similar service delivery and engagement model
• A credible certification in the relevant field is preferred
  
  

Preferred

Experience with implementing SAP GRC Process Controls

CISSP certification

CISA certification

SAP Security Certification

We offer a number of accommodations to complete our interview process including screen readers, sign language interpreters, accessible and single location for in-person interviews, closed captioning, and other reasonable modifications as needed. If you discover, as you navigate our application process, that you need assistance or an accommodation due to a disability, please complete theCandidate Accommodation Request Form.

We offer a number of accommodations to complete our interview process including screen readers, sign language interpreters, accessible and single location for in-person interviews, closed captioning, and other reasonable modifications as needed. If you discover, as you navigate our application process, that you need assistance or an accommodation due to a disability, please complete the Candidate Accommodation Request Form.