Job Title:  SAP Security Lead

We are seeking a highly skilled and experienced Senior Security Lead for SAP S/4HANA to join our SAP team in AMETEK Bangalore. The role involves developing and implementing robust security strategies, ensuring compliance with governance standards, and managing risks across the SAP landscape. The ideal candidate will have extensive knowledge of SAP security concepts, Governance, Risk, and Compliance (GRC) solutions, and the ability to collaborate with cross-functional teams to safeguard our enterprise systems.

This role requires close coordination with various business, Corporate IT and other multiple teams within the organization. 

Roles and Responsibilities:

• Develop and maintain SAP security roles and authorization models for SAP S/4HANA, ECC, Fiori, and other related systems.
• Enforce Segregation of Duties (SoD) policies and address any violations with effective mitigations.
• Regularly review and audit SAP security configurations to identify and remediate potential vulnerabilities.
• Design and maintain security roles, profiles, and authorizations in SAP S/4HANA.
• Provide support for user access provisioning and de-provisioning, ensuring compliance with company policies.
• Manage and optimize SAP GRC Access Control, Process Control, and Risk Management modules. 
• Develop and enforce SAP compliance policies and standards in line with industry best practices. 
• Develop and enforce SAP security and GRC policies aligned with regulatory and industry standards (e.g., SOX, GDPR, ISO 27001).
• Monitor and report on compliance metrics and key risk indicators (KRIs) related to SAP security.
• Perform risk assessments and recommend mitigation strategies for identified vulnerabilities. 
• Develop and enforce SAP security and GRC policies aligned with regulatory and industry standards (e.g., SOX, GDPR, ISO 27001).
• Work closely with SAP functional, technical, and business teams to address security and compliance requirements. 
• Lead a team of security analysts, providing mentorship and guidance to enhance their skills and performance. 
•  Act as the primary point of contact for internal and external audits related to SAP security. 
• Stay updated on the latest trends, tools, and techniques in SAP security and GRC.
• Identify opportunities to enhance security processes and implement innovative solutions.    

Candidate Requirement:

Overall Experience:

• 8 -12 years of experience in SAP security and GRC, with at least 4-5 years in a Lead role.
• Experience with regulatory compliance and audit processes in SAP environments.
• Strong exposure to working with senior business leaders and presenting business case and status update
• Good people management.                                                                                                                                                                                                                                                                                                                                                                                                                                                  .

Required Skills:

• Strong knowledge of SAP security architecture and authorization concepts across SAP S/4HANA, ECC, Fiori, and other SAP applications.
• Hands-on experience with SAP GRC Access Control, Process Control, and Risk Management.
• Proficiency in SoD frameworks, risk analysis, and mitigation strategies.
• Familiarity with security tools such as SAP Solution Manager and third-party monitoring solutions.
• Understanding of compliance standards like SOX, GDPR, HIPAA, and ISO 27001.
• Strong communication skills with demonstrated ability to interact with business leaders
• Experience in handling teams

Qualification:

• Bachelors degree required; Masters degree preferred
• Good communication and interpersonal skills  

Certifications:

• SAP Certified Security Professional is required
• Tosca Tricentis Automation 1 / 2 is preferred
• Additionally, certification on CISSP or CISM is preferred