SAP Cybersecurity Senior Managing Consultant

IBM; Tucson (AZ); Remote; USD 180,000 - 240,000; Full time

Job summary

IBM Consulting in the United States seeks an SAP Cybersecurity Senior Managing Consultant to guide security strategy for SAP environments, including S/4HANA, SAP BTP, and GRC. You will lead delivery streams, architect secure SAP landscapes, and translate risk into practical, executive-ready actions.

You will mentor teams, shape offerings, support pursuits, and collaborate across account teams to drive client value while growing IBM's SAP cybersecurity capabilities.

Qualifications

• 12+ years of SAP security and related advisory roles.
• 6+ years leading SAP security or related work streams in enterprise or consulting environments.
• Hands-on knowledge of SAP security concepts, SAP BTP security, and GRC/Access Control.
• Experience with SAP cyber monitoring and threat detection.
• Ability to communicate with executives, auditors, and clients while supporting pursuits and travel as needed.

Responsibilities

• Lead SAP cybersecurity strategy, architecture, assessment, remediation, and advisory workstreams for complex enterprise clients.
• Design and operate security capabilities across SAP applications, SAP BTP, and hybrid cloud platforms.
• Establish SAP security baselines and control models for secure configuration and access governance.
• Translate SAP cyber risks into executive-ready recommendations, plans, and target architectures.
• Serve as technical lead across consulting programs, owning delivery quality and client value realization.
• Support security growth through solution shaping, proposals, and expansion of client relationships.
• Mentor consultants, develop reusable assets, and contribute to technical methods.

Skills

SAP security

Cybersecurity consulting

Client leadership

Risk translation

Executive communication

Threat detection

IAM

GRC

S/4HANA security

Security architecture

Education

Bachelor's Degree

Tools

SAP GRC Access Control

SAP BTP security

SAP ETD

Identity Services

Onapsis

SecurityBridge

Pathlock

Splunk

SIEM/SOC integration

Job description

Introduction

IBM Consulting is where deep industry expertise, advanced technology, and human-centered collaboration come together to help clients transform securely. As organizations modernize mission-critical SAP environments across hybrid cloud, SAP RISE, S/4HANA, and business-critical platforms, cybersecurity has become central to resilience, trust, and business value. We are seeking an SAP Cybersecurity Senior Managing Consultant who can help clients navigate that complexity with confidence.

In this role, you will serve as a trusted advisor, solution architect, and delivery leader for SAP cybersecurity programs that protect critical business processes and enable secure transformation. You will design secure SAP architectures, lead technical workstreams and delivery teams, translate cyber risk into practical action, and guide clients across SAP applications, cloud platforms, identity services, GRC, threat detection, compliance, and enterprise security operations. You will also collaborate with account, sales, and engagement leaders to support pursuits, proposals, solutioning, and client value delivery while helping grow IBM Consulting's SAP cybersecurity capabilities.

Your Role And Responsibilities

This job can be performed from anywhere in the US.

As a senior member of the SAP cybersecurity team, you will combine advisory, architecture, and delivery leadership to help clients secure critical SAP-enabled business processes from strategy through execution.

• Lead delivery of SAP cybersecurity strategy, architecture, assessment, remediation, and advisory workstreams for complex enterprise clients, including programs with regulatory, audit, or multi-system delivery scope.
• Design and operationalize security capabilities across SAP applications, SAP BTP and hybrid cloud platforms, identity services, GRC, access governance, threat detection, and modern transformation landscapes.
• Establish SAP security baselines and control models for secure configuration, patch governance, privileged access, segregation of duties, audit logging, cyber monitoring, vulnerability management, and control validation.
• Translate SAP cyber risks, control gaps, and technical findings into executive-ready recommendations, remediation plans, target-state architectures, and measurable risk reduction programs.
• Serve as technical lead or solution architect across consulting programs, leading delivery teams and owning delivery quality, risk management, stakeholder communications, technical decisions, and client value realization.
• Support SAP cybersecurity growth through solution shaping, proposal input, statements of work, estimation, offering differentiation, and expansion of trusted client relationships.
• Strengthen IBM Consulting's SAP cybersecurity capabilities by mentoring consultants, developing reusable delivery assets, contributing to technical methods, and supporting client and internal technical discussions.

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

To succeed in this role, you will bring SAP security depth, cybersecurity consulting experience, client leadership, and the ability to translate risk into practical outcomes.

• 12+ years of experience across SAP security, cybersecurity, technology risk, enterprise application security, cloud security, IAM, GRC, or related advisory roles.
• 6+ years leading SAP security, GRC, IAM, cyber monitoring, cloud security, or technology risk work streams in enterprise or consulting environments.
• Experience as a work stream lead, solution architect, team lead, or client-facing advisor on SAP security or enterprise transformation programs, including leading delivery teams.
• Hands-on knowledge of SAP application security, SAP BTP security, SAP GRC Access Control, authorization concepts, role design, access governance, segregation of duties, privileged access, and identity lifecycle governance.
• Experience with SAP cyber monitoring and threat detection (such as SAP Enterprise Threat Detection or comparable platforms), vulnerability management, secure configuration, patch governance, SIEM/SOC integration, or incident response.
• Ability to communicate with executive, technical, audit, compliance, and business stakeholders while supporting pursuits, client-ready materials, trusted relationships, and travel as needed.

Preferred Technical And Professional Experience

In addition to the required expertise, strong candidates will bring experience that helps them contribute quickly to complex SAP cybersecurity engagements, shape client-ready solutions, and strengthen IBM Consulting's offerings.

• Background in consulting, systems integration, cybersecurity advisory, managed security services, independent consulting, or regulated enterprise environments.
• Experience leading SAP cybersecurity transformation programs for enterprise clients in regulated or complex industries such as life sciences, medical devices, retail, or manufacturing.
• Familiarity with SAP-native and SAP-focused security platforms such as SAP ETD, SAP GRC, SAP Cloud Identity Services, SAP BTP security, Onapsis, SecurityBridge, Pathlock, or similar solutions.
• Experience connecting SAP security with broader enterprise cyber capabilities such as SIEM/SOAR (for example Splunk), IAM, privileged access, vulnerability management, cloud security, managed detection, and continuous controls monitoring.
• Knowledge of SAP hardening (RFC Gateway, UCON, ICM, message server, encryption, audit logging), secure integration, cloud transformation, S/4HANA, SAP RISE, SAP BTP, and security-by-design approaches.
• Experience contributing to operating models, governance frameworks, control automation, managed service transitions, account growth, solution development, or practice development.
• Relevant certifications such as CISSP, CISM, CISA, CCSP, SAP security certifications, or equivalent professional experience.

Beyond technical expertise, we value consultants who bring executive presence, sound judgment, inclusive leadership, and a growth mindset to complex client challenges.

• Connects technical risk to business priorities, regulatory expectations, and measurable security outcomes.
• Moves confidently between executive discussions, architecture decisions, delivery leadership, and hands-on problem solving.
• Builds trust across client stakeholders, technical teams, auditors, security operations, and delivery partners.
• Develops talent, mentors consultants, and creates inclusive, accountable teams that deliver high-quality outcomes.
• Contributes to practice growth through reusable assets, differentiated offerings, thought leadership, and pursuit support.