SAP GRC & Security Risk Tech Manager | Client Delivery

Ernst & Young Advisory Services Sdn Bhd; New York (NY); On-site; USD 171,000 - 297,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd in New York is seeking a Risk Technology Manager specializing in SAP GRC and Application Security to guide large-scale SAP security programs across multiple clients. You will design and implement risk-based security controls, lead onshore/offshore teams, and help clients navigate governance, risk and compliance challenges.

Travel up to 80% is expected; the role demands deep SAP security expertise, strong communication, and a proven ability to deliver

Qualifications

• 6+ years of experience in an SAP Security and GRC lead role.
• Bachelor’s or Master’s degree in computer science, information security, information management systems or related field preferred.
• Hands-on experience with design, build, test and deploy of Application security across SAP applications (S/4HANA, FIORI, ECC, ARIBA, HCM, SuccessFactors).
• Strong SAP GRC Access Control implementation experience (version 12.0 or other) with IAM tools (Saviynt, SailPoint, SAP IAG).
• Experience with SOD/CA, risk framework design, and audit discussions; familiarity with tickets (ServiceNow, HP ALM).
• Ability to manage multiple projects, travel up to 80%, and supervise onshore/offshore teams.

Responsibilities

• Design and implement SAP Security and GRC solutions across client SAP environments.
• Lead transformation journeys focusing on Application security and GRC Access Control.
• Coordinate onshore and offshore teams to deliver secure SAP architectures.
• Engage with clients to define functional requirements and governance controls.
• Stay current on SAP security trends and support risk-function maturity in client organizations.

Skills

Leadership

Project management

Client service

Communication

Analytical skills

Team coordination

Education

Bachelor's or Master's in CS/Information Security/Information Management Systems

Tools

SAP GRC Access Control

SAP S/4HANA

SAP FIORI

ECC

Ariba

HCM

SuccessFactors

ServiceNow

HP ALM

Saviynt

SailPoint

SAP IAG

SAP HANA

Job description

Ernst & Young Advisory Services Sdn Bhd in New York is seeking a Risk Technology Manager specializing in SAP GRC and Application Security to guide large-scale SAP security programs across multiple clients. You will design and implement risk-based security controls, lead onshore/offshore teams, and help clients navigate governance, risk and compliance challenges.

Travel up to 80% is expected; the role demands deep SAP security expertise, strong communication, and a proven ability to deliver