SAP Security Manager

PepsiCo Inc.; Plano (TX); On-site; USD 111,000 - 185,000; Full time

Benefits offered by this job

Bonus based on performance (12% target

Paid time off

Comprehensive benefits package

Job summary

PepsiCo Inc. is seeking a SAP Security Sustain Manager to lead day-to-day SAP Security across production and non-production environments. You will manage access governance, SOX/ITGC compliance, audits, and vendor relationships to ensure secure SAP access and reliable service delivery.

This role spans global SAP landscapes and requires senior-level security expertise. You will drive continuous improvement, leadership of security teams, and collaboration with controls, cybersecurity, and SAP

Qualifications

• Bachelor's degree or equivalent in IT/IS/cybersecurity or related field.
• 8+ years of SAP Security experience.
• 3+ years of leadership or people management experience.
• Deep expertise in SAP Security & Authorization, SAP GRC, SoD, S/4HANA, Fiori, BW/HCM/CRM/SCM security.

Responsibilities

• Lead SAP Security sustain operations across global landscapes.
• Own service delivery performance, SLAs, KPIs, and operational metrics.
• Govern SAP role design, maintenance, and optimization.
• Lead SoD risk management, access reviews, and controls.
• Coordinate audits, remediation plans, and security testing.
• Oversee vulnerability identification and patch recommendations.
• Provide security approvals for changes and releases.
• Lead internal and external security teams and vendor partners.
• Provide regular security reporting to leadership.

Skills

Leadership

SAP Security concepts

SoD (SoD risk)

GRC Knowledge

Audit & compliance

Vendor management

Education

Bachelor's degree in IT/IS/C cybersecurity or related field

Tools

SAP Security

SAP GRC

S/4HANA Security

Fiori Security

Job description

Overview

The SAP Security Sustain Manager leads the day-to-day operation of SAP Security services across production and non-production environments. The role is responsible for access governance, compliance, audit support, service delivery, operational excellence, vendor management, and continuous improvement while ensuring business users maintain secure and compliant access to SAP systems.

The role balances security governance, business enablement, audit compliance, risk management, sustain support operations, and vendor management to ensure reliable and efficient SAP security services across the enterprise.

Responsibilities

Service Delivery Management

• Lead SAP Security sustain operations across global SAP landscapes
• Own service delivery performance, SLAs, KPIs, and operational metrics.
• Manage incident, request, and problem management processes.
• Ensure timely resolution of SAP security tickets and escalations.
• Drive continuous service improvements and operational efficiencies.

User Access Governance

• Oversee user provisioning, deprovisioning, and access modifications.
• Ensure compliance with access management policies and standards.
• Govern privileged access, Firefighter IDs, and emergency access processes.
• Review and approve high-risk access requests.
• Support identity lifecycle management activities.

Role & Authorization Management

• Govern SAP role design, maintenance, and optimization.
• Approve role changes and authorization enhancements.
• Ensure role-based access controls support business requirements.
• Maintain security authorization matrices and role documentation.
• Drive role simplification and standardization initiatives.

Governance, Risk & Compliance (GRC)

• Lead Segregation of Duties (SoD) risk management and remediation.
• Govern SAP GRC Access Control processes and rulesets.
• Conduct periodic access reviews and certifications.
• Monitor sensitive access and risk violations.
• Ensure compliance with SOX, ITGC, and corporate security standards.

Audit & Controls

• Serve as the primary SAP Security contact for internal and external audits.
• Coordinate audit evidence collection and control testing.
• Ensure execution of SAP security controls.
• Manage remediation plans for audit observations and compliance findings.
• Maintain security policies, procedures, and support documentation.

Vulnerability & Risk Management

• Oversee SAP vulnerability identification and remediation.
• Review SAP OSS security notes and patch recommendations.
• Ensure security risks are assessed before production deployment.
• Monitor compliance with enterprise cybersecurity standards.
• Drive closure of security findings and risk exceptions.

Change & Release Management

• Provide security approval for application enhancements and releases.
• Review security impacts of projects, upgrades, and system changes.
• Participate in testing, cutover, and hypercare support.
• Ensure security controls remain effective following deployments.
• Support transition of projects into sustain operations.

Vendor & Team Leadership

• Lead internal SAP Security analysts and external service providers.
• Manage vendor performance, contract deliverables, and resource planning.
• Conduct performance reviews and skill development activities.
• Establish operational governance with delivery partners.
• Drive knowledge management and cross-training initiatives.

Reporting & Stakeholder Management

• Provide regular operational reporting to leadership.
• Present security metrics, risk posture, audit status, and service health.
• Partner with Business, Controls, Audit, Cybersecurity, and SAP functional teams.
• Escalate critical security risks and operational issues appropriately.
• Support executive decision‑making through security insights and recommendations.

Key Success Metrics

• SLA Compliance
• Ticket Backlog Reduction
• SoD Risk Reduction
• Audit Compliance Results
• Access Provisioning Turnaround Time
• Security Vulnerability Closure Rates
• User Satisfaction
• Operational Cost Optimization
• Control Effectiveness
• Vendor Performance Metrics

Compensation and Benefits:

• The expected compensation range for this position is between $110,700 - $185,250.
• Location, confirmed job‑related skills, experience, and education will be considered in setting actual starting salary.
• Bonus based on performance and eligibility target payout is 12% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Qualifications

Required Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field.
• 8+ years of SAP Security experience.
• 3+ years of leadership or people management experience.
• Deep expertise in:
  • SAP Security & Authorization Concepts
  • SAP GRC Access Control
  • Segregation of Duties (SoD)
  • SAP S/4HANA Security
  • SAP Fiori Security
  • SAP BW, HCM, CRM, SCM Security
  • Audit and Compliance Controls
• Experience leading global SAP security initiatives and project teams.

Preferred Qualifications

• SAP Security or SAP GRC certifications.
• Experience with cloud security models and SAP BTP.
• Knowledge of SOX, COBIT, NIST, and cybersecurity frameworks.
• Experience supporting multinational SAP landscapes and global deployments.
• Strong understanding of SAP integration and application controls.

Competencies

• Strategic Thinking
• Leadership & Team Development
• Stakeholder Management
• Risk Management
• Executive Communication
• Problem Solving
• Vendor Management
• Program & Project Management
• Cross‑Functional Collaboration
• Results Orientation

EEO Statement

Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but not limited to, San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance; and Chapter XVII, Article 9 of the Los Angeles Municipal Code, commonly referred to as the Fair Chance Initiative for Hiring Ordinance.

All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity / Age

If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy.

Please view our Pay Transparency Statement.