Senior SAP Security & GRC Engineer (IAM/SoD)

Loyalty360; Milford Terrace (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Ahold Delhaize USA is seeking a Senior Security Engineer IV to lead SAP Security, IAM, and GRC operations within the Retail Spine transformation. You will design roles, manage access controls, and ensure audit readiness across SAP S/4HANA and integrated systems.

Collaborate with SAP functional teams, Audit, InfoSec, and vendors to enforce SoD, MFA, SSO and identity federation. Drive SOX, PCI, GDPR compliance, and secure release lifecycles across agile, hybrid, and waterfall delivery environments.

Qualifications

• Bachelor's degree in IT, cybersecurity or related field.
• 10+ years of experience in SAP Security and SAP GRC Access Control.
• Strong hands-on experience with SAP role design, SoD, Firefighter, GRC Access Control, and audit/compliance frameworks.
• Working knowledge of SAP S/4HANA, HANA, Fiori, SAP BTP, and integrated security architecture.
• Experience partnering with System Integrators and managing multi-vendor delivery models.
• Strong understanding of SOX, PCI, GDPR, and enterprise security standards.
• Excellent communication, stakeholder engagement, and leadership skills.

Responsibilities

• Provide strategic and operational support across SAP Security and GRC functions, ensuring a secure, compliant landscape.
• Own SAP role design standards, including catalog governance, SoD frameworks, and access workflows.
• Define identity and access management integration standards with SSO, MFA, and federation.
• Support SAP GRC platform operations including access control, Firefighter, and access reviews.
• Own SOX, PCI, GDPR readiness and maintain audit evidence with Internal/External Audit teams.
• Ensure security is embedded across release lifecycles, transport reviews, and landscape changes.
• Govern security obligations of SI and vendor partners, enforcing standards and risk remediation.
• Collaborate with SAP leadership to maintain secure solution patterns and architecture.
• Establish KPIs for SAP Security and GRC; drive improvements through automation.
• Provide security support during go-lives, cutovers, and major transformation waves.

Skills

SAP Security

GRC Access Control

SoD (Segregation of Duties)

Identity & Access Management (IAM)

Audit & Compliance

SOX Compliance

PCI Compliance

GDPR Knowledge

Azure AD/Entra ID

SAP S/4HANA & BTP

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field

Master's degree (preferred)

Tools

SAP S/4HANA

SAP BTP

Azure AD/Entra ID federation

Job description

Ahold Delhaize USA is seeking a Senior Security Engineer IV to lead SAP Security, IAM, and GRC operations within the Retail Spine transformation. You will design roles, manage access controls, and ensure audit readiness across SAP S/4HANA and integrated systems.

Collaborate with SAP functional teams, Audit, InfoSec, and vendors to enforce SoD, MFA, SSO and identity federation. Drive SOX, PCI, GDPR compliance, and secure release lifecycles across agile, hybrid, and waterfall delivery environments.