Senior SAP Security & GRC Risk Tech Lead

EY; Chicago (IL); Hybrid; USD 143,000 - 297,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Risk Technology Manager to lead SAP Application Security and GRC initiatives across global clients. You’ll design and implement security controls, manage onshore/offshore teams, and advise on risk governance within SAP environments.

The role requires 6+ years in SAP Security/GRC, strong leadership, and willingness to travel up to 80%. EY offers a hybrid work model and a comprehensive rewards package.

Qualifications

• 6+ years in an SAP Security and GRC lead role.
• Bachelor's or master's degree in CS/InfoSec/Information management systems or related field.
• Hands-on experience with design, build, test and deploy Application security across SAP applications (S/4, FIORI, ECC, ARIBA, HCM, SuccessFactors).
• SAP HANA DB security is preferred.
• Strong SAP GRC Access Control implementation experience with IAM tools (Saviynt, SailPoint, SAP IAG).
• Experience designing processes to review SODs and Critical Actions; emergency management and user provisioning.
• Risk framework/ruleset design to align SAP application security to risk controls.
• Willingness to travel; travel up to 80%; valid US driver’s license and passport.
• Strong project management, team management, and client service.
• Strong analytical, interpersonal and communication skills.
• Industry certification preferred (e.g., CISA, PMP, CIA, RICS) and SAP GRC AC certification.

Responsibilities

• Design and implement SAP ERP security and GRC processes (Application security, GRC Access Control).
• Leverage EY IP and lessons learned; build strong client relationships to address complex issues.
• Help clients implement secure design and manage organizational change within SAP environments.
• Collaborate across teams to ensure effective execution of SAP security projects.

Skills

SAP Security

GRC Access Control

SAP Transformation

Project management

Client engagement

Communication skills

Team leadership

Travel readiness

Education

Bachelors or Masters in CS/InfoSec

Tools

ServiceNow

HP ALM

Saviynt

SailPoint

SAP IAG

Job description

EY is seeking a Risk Technology Manager to lead SAP Application Security and GRC initiatives across global clients. You’ll design and implement security controls, manage onshore/offshore teams, and advise on risk governance within SAP environments.

The role requires 6+ years in SAP Security/GRC, strong leadership, and willingness to travel up to 80%. EY offers a hybrid work model and a comprehensive rewards package.