Senior SAP Security & GRC Risk Manager (Hybrid)

Ernst & Young Oman; San Francisco (CA); Hybrid; USD 143,000 - 262,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off options

Job summary

EY is seeking a Risk Technology Manager to lead SAP Security and GRC initiatives across diverse clients in the US. You will design and implement security architectures, balance risk and control requirements, and guide multi-disciplinary teams through transformation journeys involving SAP applications and SaaS offerings.

The role emphasizes building trusted advisory relationships, leveraging EY intellectual property, and delivering leading practice risk functions with frequent client engagement

Qualifications

• 6+ years of experience in an SAP Security and GRC lead role.
• Bachelor's or Master’s degree in computer science, information security, information management systems, or related field preferred.
• Extensive hands-on experience with design, build, test and deploy Application security across SAP applications (S/4HANA, FIORI, ECC, ARIBA, HCM, SuccessFactors).
• SAP HANA DB security is preferred.
• Strong SAP GRC Access Control implementation experience with integration knowledge of IAM tools.

Responsibilities

• Design and implement SAP ERP processes focusing on Application Security and GRC across transformation journeys.
• Build strong client relationships and leverage EY IP and lessons learned.
• Manage onshore and offshore teams throughout the project lifecycle.
• Participate in SAP audit discussions and address governance and compliance issues.
• Document functional requirements and communicate across EY and client teams.

Skills

SAP Security

GRC

Application security

Leadership

Project management

Client service

Communication

Willingness to travel

Education

Bachelor's or Master’s in CS/Information Security

Tools

ServiceNow

HP ALM

IAM tools (Saviynt, SailPoint, SAP IAG)

Job description

EY is seeking a Risk Technology Manager to lead SAP Security and GRC initiatives across diverse clients in the US. You will design and implement security architectures, balance risk and control requirements, and guide multi-disciplinary teams through transformation journeys involving SAP applications and SaaS offerings.

The role emphasizes building trusted advisory relationships, leveraging EY intellectual property, and delivering leading practice risk functions with frequent client engagement