Senior SAP Security, GRC & Compliance Leader

PVH Corp.; Bridgewater (MA); On-site; USD 140,000 - 180,000; Full time

Job summary

PVH Corp. seeks a Senior Lead, SAP Security, GRC & Compliance to serve as a Subject Matter Expert for SAP Security & GRC, managing multiple GRC instances and overseeing key SOX controls.

You will design security across modules (S/4HANA, EWM, Fiori, ECC), configure GRC, manage access provisioning, perform SoD/risk analyses, and support audits. Lead IT teams and produce documentation and training.

Qualifications

• 8–10+ years of SAP Security & GRC hands-on experience.
• Experience with configuration/implementation across SAP landscapes (on-premise and cloud).
• Strong understanding of SOX, GDPR, HIPAA, NIST, and J-SOX compliance.
• Ability to lead, mentor, and communicate security concepts to non-technical stakeholders.

Responsibilities

• Security Design: Developing and implementing SAP security, including role design, authorization objects, and user access controls across SAP modules (S/4HANA, EWM, FMS CAR, Fiori, BW, ECC).
• GRC Configuration & Management: Configuring and managing SAP GRC modules (Access Control, Process Control, Risk Management) to automate security and risk processes.
• Access Management & Provisioning: Overseeing user lifecycle, provisioning/deprovisioning, emergency access, and access reviews.
• SoD & Risk Analysis: Performing SoD/CA analysis, refining GRC ruleset, and coordinating mitigations with process owners.
• Compliance & Audit Support: Supporting SOX/GDPR/NIST audits, providing evidence, and resolving audit findings.
• Documentation & Training: Maintaining SOPs and delivering security-awareness training.

Skills

SAP Security

GRC

Access Control

SOX

Risk Management

S/4HANA

EWM

Fiori

ECC

Leadership

Communication

Education

Bachelor’s degree in Computer Science or Accounting

Tools

S/4HANA

EWM

Fiori

ECC

Job description

PVH Corp. seeks a Senior Lead, SAP Security, GRC & Compliance to serve as a Subject Matter Expert for SAP Security & GRC, managing multiple GRC instances and overseeing key SOX controls.

You will design security across modules (S/4HANA, EWM, Fiori, ECC), configure GRC, manage access provisioning, perform SoD/risk analyses, and support audits. Lead IT teams and produce documentation and training.