Principal Engineer, Security & Compliance

Nike Inc; Beaverton, Northern (OR, KY); Sur place; USD 150 000 - 210 000; Plein temps

Résumé du poste

Nike Inc. is seeking a Principal SAP Application Security Engineer to own, design, and manage a forward-looking SAP security strategy within Nike Technology.

You will lead risk-based decisions, partner with SAP and internal teams, and drive secure development across multi-year roadmaps, ensuring compliance with NIST and industry best practices. The role requires 13+ years in SAP security and a track record of full-cycle implementations.

Qualifications

• 13+ years of experience in SAP Security with at least five full cycle implementation/upgrade projects.
• Solid background in a consulting/services delivery and engagement model.
• Credible certification in the relevant field is preferred.

Responsabilités

• Create, drive and own NIKE's SAP multi-year security strategy and develop roadmaps aligned with industry best practices and NIKE's information security framework.
• Lead the delivery of work during quarterly planning workshops and coordinate with priority projects.
• Research and implement leading technology solutions to protect data and comply with global regulations.
• Partner with SAP and internal teams to influence product enhancements and align newer technologies with security best practices.

Connaissances

SAP Security

GRC Access Control

Security Strategy

NIST Compliance

Stakeholder Communication

Formation

Bachelor's Degree in Computer Science

Outils

SAP

SAP GRC 12.x

Description du poste

WHO WE ARE LOOKING FOR

NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data, and providing leading-edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport. We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally. Our teams are innovative, diverse, multidisciplinary, and collaborative, taking technology into the future and bringing the world with it

We are looking for a Principal SAP Application Security Engineer at NIKE Technology. Your role on the team will be to own, design, and manage a competitive application security strategy, and drive best practices. This is a critical role within the organization that will enable tools and processes in the delivery of technology that will transform our application security solutions. You will work in close partnership withother leaders throughout NIKE to ensurewe embrace industry-leading innovations, trends, transformations and support strategic priorities for NIKE'srapidly growing business.This position will require that you bring a strong background in theapplication securityfield and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job."

WHAT YOU WILL WORK ON

This role will be performing these key tasks:

• Create, drive and own NIKE's SAP Multi-year Security strategy, Develop Roadmaps aligning with industry best practices and NIKE Corporate Information Security framework.

• Manage a Master Service Partner to execute and deliver the SAP Security strategy.
• Lead the delivery of work during quarterly planning workshops aligning the work to existing priorities in accordance with the strategy, roadmap and business requirements.
• Research and implement leading technology solutions to protect data, comply with global regulations
• Work with business to create Risk Control Matrix, Design GRC risks, and Segregation of Duties ruleset
• Partner with SAP AG to influence product enhancements/roadmaps to align newer technologies with evolving Security best practices
• Partner with NIKE Corporate Information Security, Finance Governance & Controls, Internal Controls, Global Risk Management teams to develop a Secure and Compliant SAP Security framework
• Partner with Corporate Information Security to have a solid governance process for Critical SAP Security patches in accordance with NIST
• Technical knowledge and proven experience in communicating with both highly technical audiences and non-highly technical audiences
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences

WHO YOU WILL WORK WITH

You will work in close partnership withother leaders throughout NIKE's technical and businesscommunity to ensureNIKETechnology embraces industry-leading innovations, trends, and transformations and accelerates and supports business strategies and priorities for NIKE’srapidly growing business.This position will require that you bring a strong background in in theapplication securityfield and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job".

WHAT YOU BRING

• Bachelor's Degree in Computer Science or a related field experience. Will accept any suitable combination of education, experience or training.
• 13+ years experience in SAP Security with at least five full cycle implementation/upgrade projects
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration
• A solid background in a consulting services firm or similar service delivery and engagement model
• A credible certification in the relevant field is preferred

Preferred

• Experience with implementing SAP GRC Process Controls
• CISSP certification
• CISA certification
• SAP Security Certification

We offer a number of accommodations to complete our interview process including screen readers, sign language interpreters, accessible and single location for in-person interviews, closed captioning, and other reasonable modifications as needed.