Sr Mgr, SAP & Enterprise Applications Security Specialist

Newell Brands; Atlanta (GA); Hybrid; USD 136,000 - 187,000; Full time

Job summary

Newell Brands in Atlanta, GA seeks a Sr Mgr for SAP & Enterprise Applications Security to own design, engineering and governance of access across SAP landscape including ECC, S/4HANA, GRC, and cloud apps. You will collaborate with IAM, audit and application owners to deliver secure access models.

Responsibilities include leading role redesigns, enforcing least privilege, and supporting SOX controls while aligning with enterprise security standards and delivery milestones.

Qualifications

• 7+ years hands-on SAP security across ECC and S/4HANA.
• Experience with SAP GRC Access Control (ARA, ARM, BRM, EAM) and risk-based reviews.
• RBAC with ABAC/PBAC concepts.
• IGA integrations (SailPoint) incl. SAP to IGA controls.
• SOX IT general controls experience and audits.

Responsibilities

• Design and maintain SAP authorization roles (single, composite, derived).
• Lead role redesign for S/4HANA and Fiori.
• Apply RBAC foundation; consider ABAC/PBAC.
• Enforce least privilege across SAP and apps; manage reviews.
• Operate SAP GRC (ARA/ARM/BRM/EAM) and do risk analysis.
• Support SOX IT controls and audits.
• Collaborate with IAM teams and project stakeholders.

Skills

SAP security

GRC Access Control

RBAC/ABAC/PBAC

SOX IT controls

Identity Governance

SailPoint ISC

IdentityIQ

Education

Bachelor’s degree in IT or related field

Tools

SAP GRC Access Control

SailPoint Identity Security Cloud

IdentityIQ

S/4HANA

Job description

Career Opportunities: Sr Mgr, SAP & Enterprise Applications Security Specialist (16314)

Requisition ID16314-Posted -United States-Onsite-Full-Time-IT

Newell Brands is a leading consumer products company with a portfolio of iconic brands like Graco®, Coleman®, Oster®, Rubbermaid®, Sharpie® and Yankee Candle® - and 24,000 talented teammates around the world. Our culture is built on values in action: Integrity, Teamwork, Passion for Winning, Ownership, and Leadership. We work together to win, grow, and make a real impact—supported by a high-performing, inclusive, and collaborative environment where you can be your best, every day.

Position Title: SAP & Enterprise Applications Security Specialist

Location: Atlanta, GA / Remote

Reports To: Senior Manager, IT SAP & Enterprise Applications Security

Role Overview:

The SAP & Enterprise Applications Security Specialist owns the design, engineering and governance of access across Newell’s SAP landscape — ECC, S/4HANA, SAP GRC Access Control, SuccessFactors, Ariba, IBP, VisualFabriq and the broader SAP cloud environment. SAP is the anchor of the role, with scope extending to any in-scope enterprise application.

This position sits within the Identity and Access Management organization and works closely with SAP functional and Basis teams, application owners, business process owners, and internal and external audit. It partners closely with the Identity Governance and Access Operations teams, supplying the role designs and entitlement definitions that onboarding and provisioning processes depend on.

The ideal candidate thinks in terms of how access should work, stays current on where SAP security and identity are heading, and knows where to spend review effort and where to automate.

Key Responsibilities:

• Design, build and maintain SAP authorization roles (single, composite and derived) and application-level roles, following consistent naming, transport and change management standards.
• Lead role redesign efforts, including authorization concept work for S/4HANA and Fiori.
• Apply the appropriate access model for each system — RBAC as the foundation, ABAC or PBAC where they fit.
• Enforce least privilege across SAP and application roles (including Ariba, IBP and VisualFabriq), right-sizing roles and removing excessive or dormant access over time.
• Support periodic user access reviews and certifications, applying both role-based and risk-based approaches.
• Operate SAP GRC Access Control (ARA, ARM, BRM and EAM), including emergency and firefighter access administration.
• Run access risk analysis at the user and role level and drive remediation of conflicts and critical access, in support of the Governance team’s SOD ruleset.
• Support SOX IT general controls, audits and the annual review of SAP and SailPoint integration controls.
• Supply role designs and entitlement definitions to the Identity Governance and Access Operations teams for use in onboarding and provisioning.
• Serve as security liaison on SAP and S/4HANA projects, building roles to requirements and meeting delivery milestones.
• Support security across the broader enterprise application portfolio, including Ariba, IBP, VisualFabriq, SuccessFactors, SAP Cloud Identity Services (IAS/IPS), HANA, BTP and Fiori.
• Troubleshoot SAP authorization errors (SU53) and develop solutions in accordance with company standards.

Required Qualifications:

• 7+ years of hands‑on SAP security and authorizations experience across ECC and S/4HANA, including role engineering with single, composite and derived roles.
• Strong understanding of access risk management and hands‑on SAP GRC Access Control experience (ARA, ARM, BRM and EAM), including access risk analysis and mitigating controls.
• Working knowledge of RBAC, with practical exposure to ABAC and PBAC concepts.
• Experience with access reviews and certifications using both role-based and risk-based approaches.
• Working understanding of how SAP and application roles integrate with an IGA platform such as SailPoint Identity Security Cloud (ISC) or IdentityIQ, including SAP to IGA integration controls.
• Experience supporting SOX IT general controls and working directly with internal and external auditors.
• Ability to work across functional, Basis, audit and IAM teams without direct authority, and to explain access risk to both technical and business audiences.
• Bachelor’s degree in information technology, computer science, information security or a related field, or equivalent professional experience.

Preferred Qualifications:

• SailPoint certification (ISC or IdentityIQ) or SAP security or GRC certification.
• S/4HANA role redesign or migration experience (greenfield or brownfield).
• Experience with SAP Fiori, OData, HANA database security and SAP BTP security.
• Experience with SuccessFactors Employee Central security and SAP Cloud Identity Services (IAS/IPS).
• Familiarity with SAP Identity Access Governance (IAG) or other cloud GRC tooling.
• CISSP, CISM or equivalent security certification.

The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position

Newell Brands (NASDAQ: NWL) is a leading global consumer goods company with a strong portfolio of well‑known brands, including Rubbermaid, Sharpie, Graco, Coleman, Rubbermaid Commercial Products, Yankee Candle, Paper Mate, FoodSaver, Dymo, EXPO, Elmer’s, Oster, NUK, Spontex and Campingaz. We are focused on delighting consumers by lighting up everyday moments. Newell Brands and its subsidiaries are Equal Opportunity Employers and comply with applicable employment laws. EOE/M/F/Vet/Disabled are encouraged to apply.