Principal Engineer, Security & Compliance

Global Sports Jobs Limited; Pahokee (FL); On-site; USD 150,000 - 210,000; Full time

Job summary

NIKE Global Technology is seeking a senior leader to own and advance our application security strategy, focusing on SAP security and governance. You will drive multi-year roadmaps, partner with SAP and NIKE teams, and influence risk-based decisions across the organization.

Responsibilities include leading quarterly planning, aligning security work with business priorities, and implementing best practices for data protection and regulatory compliance.

Qualifications

• Bachelor's Degree in Computer Science or a related field is required.
• 13+ years of experience in SAP Security, including at least five full cycle implementation or upgrade projects.
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration.

Responsibilities

• Own, design and manage a competitive application security strategy.
• Drive SAP multi-year security strategy and roadmaps.
• Lead delivery during quarterly planning workshops aligning work to strategy.
• Research and implement leading technology solutions to protect data and comply with global regulations.

Skills

SAP Security

Application security

Facilitation & influence

Technical communication

Leadership

Education

Bachelor's Degree in Computer Science or related field

Tools

SAP GRC Access Control 12.x

Job description

About the Role

This role sits within NIKE Technology and is responsible for owning, designing and managing a competitive application security strategy and driving best practices. It is a critical position that enables the tools and processes used to deliver technology that transforms NIKE's application security solutions. The post-holder works in close partnership with leaders across NIKE's technical and business community to ensure NIKE Technology embraces industry-leading innovations, trends and transformations and supports strategic priorities for a rapidly growing business. The role calls for a strong background in application security and SAP technologies combined with the facilitation and influencing skills needed to shape NIKE's future direction.

Key Responsibilities

• Own, design and manage a competitive application security strategy and drive best practices.
• Create, drive and own NIKE's SAP multi-year security strategy and develop roadmaps aligned with industry best practices and the NIKE Corporate Information Security framework.
• Manage a Master Service Partner to execute and deliver the SAP security strategy.
• Lead the delivery of work during quarterly planning workshops, aligning work to existing priorities in accordance with the strategy, roadmap and business requirements.
• Research and implement leading technology solutions to protect data and comply with global regulations.
• Work with the business to create a Risk Control Matrix, design GRC risks and define a Segregation of Duties ruleset.
• Partner with SAP AG to influence product enhancements and roadmaps so that newer technologies align with evolving security best practices.
• Partner with NIKE Corporate Information Security, Finance Governance & Controls, Internal Controls and Global Risk Management teams to develop a secure and compliant SAP security framework.
• Partner with Corporate Information Security to establish a solid governance process for critical SAP security patches in accordance with NIST.
• Enable tools and processes in the delivery of technology that transforms application security solutions.

Required Experience & Qualifications

• Bachelor's Degree in Computer Science or a related field, or any suitable combination of education, experience or training.
• 13+ years of experience in SAP Security, including at least five full cycle implementation or upgrade projects.
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration.
• A solid background in a consulting services firm or a similar service delivery and engagement model.
• A strong background in the application security field and SAP technologies.
• Facilitation and influencing skills needed to shape NIKE's future direction.
• Technical knowledge and proven experience communicating with both highly technical and non-highly technical audiences.
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences.Leadership, interpersonal and technical skills.

Preferred Skills

• A credible certification in the relevant field.
• Experience with implementing SAP GRC Process Controls.
• CISSP certification.
• CISA certification.
• SAP Security Certification.

The Application Process

NIKE offers a number of accommodations to complete its interview process, including screen readers, sign language interpreters, an accessible and single location for in-person interviews, closed captioning and other reasonable modifications as needed.

About the Company

From its flagship website and five-star mobile apps to developing products, managing big data and providing leading-edge engineering and systems support, NIKE Global Technology teams exist to revolutionise the future at the confluence of tech and sport.