SAP Security Manager

PepsiCo; Plano (TX); On-site; USD 111,000 - 185,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Disability insurance

Defined Contribution Retirement Plan

Employee Assistance Program (EAP)

Paid time off & parental leave

Job summary

PepsiCo in Plano, TX is seeking an SAP Security Sustain Manager to lead day-to-day SAP Security services across production and non-production environments. You will own access governance, audit support, risk management, and vendor coordination to ensure secure, compliant SAP access and sustained operations.

The role covers governance, change and release management, SoD remediation, GRC controls, and collaboration with controls, audit, cybersecurity teams.

Qualifications

• Bachelor’s degree in IT/IS/Cybersecurity or related field.
• 8+ years of SAP Security experience.
• 3+ years of leadership or people management experience.
• Deep expertise in SAP Security & Authorization Concepts, SAP GRC Access Control, SoD, S/4HANA Security, Fiori Security, BW/HCM/CRM/SCM Security, Audit and Compliance Controls.

Responsibilities

• Lead SAP Security sustain operations across global SAP landscapes.
• Own service delivery performance, SLAs, KPIs, and operational metrics.
• Govern user provisioning, access governance, and role design.
• Oversee SoD risk management, audits, and compliance controls.
• Drive security change, release management, and vendor governance.

Skills

Leadership

Stakeholder Management

Program & Project Management

Risk Management

Executive Communication

Cross-Functional Collaboration

Vendor Management

Strategic Thinking

Education

Bachelor's degree in IT/IS/Cybersecurity or related field

Tools

SAP Security Concepts

SAP GRC Access Control

SoD

S/4HANA Security

Fiori Security

BW/HCM/CRM/SCM Security

Job description

Overview

The SAP Security Sustain Manager leads the day-to-day operation of SAP Security services across production and non-production environments. The role is responsible for access governance, compliance, audit support, service delivery, operational excellence, vendor management, and continuous improvement while ensuring business users maintain secure and compliant access to SAP systems.

The role balances security governance, business enablement, audit compliance, risk management, sustain support operations, and vendor management to ensure reliable and efficient SAP security services across the enterprise.

Responsibilities

Service Delivery Management

• Lead SAP Security sustain operations across global SAP landscapes
• Own service delivery performance, SLAs, KPIs, and operational metrics.
• Manage incident, request, and problem management processes.
• Ensure timely resolution of SAP security tickets and escalations.
• Drive continuous service improvements and operational efficiencies.

User Access Governance

• Oversee user provisioning, deprovisioning, and access modifications.
• Ensure compliance with access management policies and standards.
• Govern privileged access, Firefighter IDs, and emergency access processes.
• Review and approve high-risk access requests.
• Support identity lifecycle management activities.

Role & Authorization Management

• Govern SAP role design, maintenance, and optimization.
• Approve role changes and authorization enhancements.
• Ensure role-based access controls support business requirements.
• Maintain security authorization matrices and role documentation.
• Drive role simplification and standardization initiatives.

Governance, Risk & Compliance (GRC)

• Lead Segregation of Duties (SoD) risk management and remediation.
• Govern SAP GRC Access Control processes and rulesets.
• Conduct periodic access reviews and certifications.
• Monitor sensitive access and risk violations.
• Ensure compliance with SOX, ITGC, and corporate security standards.

Audit & Controls

• Serve as the primary SAP Security contact for internal and external audits.
• Coordinate audit evidence collection and control testing.
• Ensure execution of SAP security controls.
• Manage remediation plans for audit observations and compliance findings.
• Maintain security policies, procedures, and support documentation.

Vulnerability & Risk Management

• Oversee SAP vulnerability identification and remediation.
• Review SAP OSS security notes and patch recommendations.
• Ensure security risks are assessed before production deployment.
• Monitor compliance with enterprise cybersecurity standards.
• Drive closure of security findings and risk exceptions.

Change & Release Management

• Provide security approval for application enhancements and releases.
• Review security impacts of projects, upgrades, and system changes.
• Participate in testing, cutover, and hypercare support.
• Ensure security controls remain effective following deployments.
• Support transition of projects into sustain operations.

Vendor & Team Leadership

• Lead internal SAP Security analysts and external service providers.
• Manage vendor performance, contract deliverables, and resource planning.
• Conduct performance reviews and skill development activities.
• Establish operational governance with delivery partners.
• Drive knowledge management and cross-training initiatives.

Reporting & Stakeholder Management

• Provide regular operational reporting to leadership.
• Present security metrics, risk posture, audit status, and service health.
• Partner with Business, Controls, Audit, Cybersecurity, and SAP functional teams.
• Escalate critical security risks and operational issues appropriately.
• Support executive decision-making through security insights and recommendations.

Key Success Metrics

• SLA Compliance
• Ticket Backlog Reduction
• SoD Risk Reduction
• Audit Compliance Results
• Access Provisioning Turnaround Time
• Security Vulnerability Closure Rates
• User Satisfaction
• Operational Cost Optimization
• Control Effectiveness
• Vendor Performance Metrics

Compensation and Benefits:

• The expected compensation range for this position is between $110,700 - $185,250.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 12% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Required Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field.
• 8+ years of SAP Security experience.
• 3+ years of leadership or people management experience.
• Deep expertise in:
  • SAP Security & Authorization Concepts
  • SAP GRC Access Control
  • Segregation of Duties (SoD)
  • SAP S/4HANA Security
  • SAP Fiori Security
  • SAP BW, HCM, CRM, SCM Security
  • Audit and Compliance Controls
• Experience leading global SAP security initiatives and project teams.

Preferred Qualifications

• SAP Security or SAP GRC certifications.
• Experience with cloud security models and SAP BTP.
• Knowledge of SOX, COBIT, NIST, and cybersecurity frameworks.
• Experience supporting multinational SAP landscapes and global deployments.
• Strong understanding of SAP integration and application controls.

Competencies

• Strategic Thinking
• Leadership & Team Development
• Stakeholder Management
• Risk Management
• Executive Communication
• Problem Solving
• Vendor Management
• Program & Project Management
• Cross-Functional Collaboration
• Results Orientation

Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but not limited to, San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance; and Chapter XVII, Article 9 of the Los Angeles Municipal Code, commonly referred to as the Fair Chance Initiative for Hiring Ordinance.All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity / AgeIf you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy.Please view our Pay Transparency Statement.