About this opportunity
Amrize lists this Sr Manager/Director SAP Security opportunity in chicago, Illinois. Review the employer’s description below for duties, qualifications and application requirements.
Job description
We’re seeking a Sr Manager/Director SAP Security who’s ready to put your skills to work on projects that matter — and build a career with a company that’s building North America.
Job Title: Sr Manager/Director SAP Security | Req ID: 18056 | Location: Chicago Office IL, Building Envelope - Corp Nashville, TN
ABOUT THE ROLE
This role sits at the heart of the Cybersecurity organization. The Sr Manager/Director will own the SAP security and access governance strategy across the full SAP landscape, ensuring robust SOX compliance, while also providing strategic direction for the broader enterprise.
The ideal candidate brings 15+ years of hands‑on SAP security depth - from role design and SoD rule set management to GRC operations and audit excellence.
The preferred locations are Chicago or Nashville. The position can also be remote as long as you are able to do the travel.
WHAT YOU'LL ACCOMPLISH
Strategic Leadership & Team Management
Lead access governance activities including role design, user access reviews, Segregation of Duties assessments, risk remediation, access certifications and ongoing security compliance.
Act as a player-coach: provide hands‑on SAP security guidance for complex role design, SoD, and GRC challenges
Own demand management, prioritization, and resource planning across both SAP Operations, SOX initiatives, S/4 Hana implementations, and upgrades.
Own all SAP controls supporting SOX compliance (ITGCs and application‑level access controls)
Serve as the primary liaison for internal and external auditors on SAP access and security topics
Translate technical SAP controls into clear, business‑aligned compliance narratives
Ensure high‑quality, consistent audit evidence and drive remediation of any audit findings
Lead end‑to‑end SoD governance including definition, maintenance, and enforcement of SoD rule sets
Identify and document mitigating controls for approved SoD conflicts; own ongoing monitoring
Drive periodic access reviews and certification campaigns aligned to SOX requirements
Role Design & RBAC
Govern and evolve the enterprise SAP role catalog including business roles and single roles Lead transformation toward modern role‑based and attribute‑based access control (RBAC/ABAC) models Define and enforce role design standards, naming conventions, and governance frameworks Manage the full role lifecycle: design, testing, deployment, and ongoing maintenance
SAP GRC & Operations
Provide end‑to‑end ownership of SAP security across S/4HANA, ECC, BTP, and Fiori landscapes Oversee SAP GRC implementation and optimization: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Process Control Drive standardization, automation, and efficiency in day‑to‑day SAP security operations Manage transport security (STMS) implications and security patching cadence
Experience with constructing and presenting SAP Security, GRC, and SOX initiatives roadmap to C Suite,
Serve as a trusted advisor to senior leadership, IT, Finance, and business teams on SAP security, GRC and SOX Initiatives
Demonstrate a commitment to communicating, improving and adhering to health, safety and environmental policies in all work environments and areas. Promote a culture of safety and exhibit these behaviors.
WHAT WE’RE LOOKING FOR
Education: Bachelor's degree
Additional Education Preferred: Master's degree
Field of Study Preferred:
Information security, Computer Science, Finance, or related field required
Required Work Experience:
15+ years in SAP Security, SAP GRC, and bolt on apps, with the majority of tenure in hands‑on SAP security roles and GRC 10.1/12.0, including implementation experience with all GRC Access Control Modules
Big 4 experience strongly preferred
Extensive experience delivering SAP Security and Authorization solutions across complex SAP environments, with strong expertise in SAP S/4HANA Security, Role Design and Authorization Concepts, and SAP Security Roles and Authorizations.
Deep hands‑on knowledge of SAP user administration, authorization objects, landscape security, and GRC MSMP/BRF+ configurations.
5+ years in leadership roles managing teams and programs; experience leading both SAP and Governance initiatives
Proven capability engaging business and technical stakeholders, conducting access and risk assessments, resolving security issues, and producing high‑quality security design, governance and compliance documentation
Experience supporting SAP transformation and cloud adoption programs across SAP S/4HANA and SAP BTP environments.
Experience with Licensing Optimization in SAP S/4 Cloud Instances
Experience with Cross-System Risk Analysis and Ruleset construction from Scratch
Required Training/Certifications:
CISSP, CISM, CISA, or CRISC (preferred)
SAP Security or SAP GRC certifications (preferred)
Required Technical Skills: SAP Security Must Have:
S/4HANA Security
ECC Security
BTP & Fiori
HANA DB Security
SAP GRC ARA
SAP GRC ARM
SAP GRC EAM
Process Control
SoD Rule Sets
Mitigating Controls
RBAC / Role Design
SOX / ITGC Compliance
Travel Requirements : 30-40%
Additional Requirements:
Strategic thinker with strong hands‑on execution in SAP security environments
Deep technical credibility in SAP security coupled with broad SOX and Governance awareness
Exceptional communication skills — able to translate SoD and access risks into business impact
Collaborative leader who can influence without authority across IT, Finance, and Compliance
Ability to manage complexity across multiple SAP instances, GRC and S/4 Hana
Successful candidates must adhere to all safety protocols and proper use of Amrize approved Personal Protection Equipment ("PPE"), including but not limited to respirators. Subject to applicable law, employees that are required to wear respirators must be clean shaven where the respirator seal meets the face in order to pass the qualitative and quantitative fit tests.
WHAT WE OFFER
Competitive salary
Retirement Savings: Choose from 401(k) pre‑tax and/or Roth after‑tax savings
Employee Stock Purchase Plan
Medical, Dental, Disability and Life Insurance
Holistic Health & Well‑being programs
Health Savings Accounts (HSAs) & Flexible Spending Accounts (FSAs) for health and dependent care
Vision and other Voluntary benefits and discounts
Paid time off & paid holidays
Paid Parental Leave (maternity & paternity)
Educational Assistance Program
Dress for your day
#LI-SZ1
Amrize is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
We thank all applicants for their interest; however, only those selected for an interview will be contacted.
#J-18808-Ljbffr
Worksite address
chicago, IL, 60290, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.