SAP GRC Risk & Security Transformation Lead

EY; New York (NY); Hybrid; USD 171,000 - 297,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) and pension

Paid time off

Job summary

EY is seeking a Risk Technology Manager in the United States to lead SAP Security and GRC implementations for diverse clients. You will design, build and deploy security controls across SAP S/4, FIORI, ECC, ARIBA, HCM and Success Factors, working with global teams.

This role requires deep expertise in SAP GRC Access Control, IAM integrations, and risk-based design aligned to SOX or GDPR. Expect heavy travel (about 80%), a collaborative culture, and opportunities for career progression within

Qualifications

• 6+ years in SAP Security and GRC lead roles.
• Degree in CS or information security preferred.
• Hands-on design/build/test/deploy of application security across SAP apps.
• Strong SAP GRC Access Control implementation with IAM integrations.
• Experience with SOD/CA reviews and risk controls.
• Willingness to travel ~80% with US driver's license and passport.

Responsibilities

• Design and implement SAP security and GRC processes in ERP transformations.
• Leverage IP and lessons learned to guide client design and change management.
• Build strong client relationships to address complex issues.
• Coordinate onshore/offshore teams through the project lifecycle.

Skills

SAP Security

GRC Access Control

Project leadership

Client engagement

SOD & CA governance

Risk framework

IAM integration

Audit discussions

Communication

Travel readiness

Education

Bachelor's or Master's in CS/Info security

Tools

ServiceNow

HP ALM

Saviynt

SailPoint

SAP IAG

Job description

EY is seeking a Risk Technology Manager in the United States to lead SAP Security and GRC implementations for diverse clients. You will design, build and deploy security controls across SAP S/4, FIORI, ECC, ARIBA, HCM and Success Factors, working with global teams.

This role requires deep expertise in SAP GRC Access Control, IAM integrations, and risk-based design aligned to SOX or GDPR. Expect heavy travel (about 80%), a collaborative culture, and opportunities for career progression within