SAP Security & Controls Workstream

Role – SAP Security & Controls Workstream Lead

Location: Parsippany NJ

Duration – 6 Month

Senior / 15+ years SAP security experience.

Position Summary

Seeking an experienced SAP S/4HANA Security & GRC Consultant to lead the SAP Security & Controls workstream on the Industrial Account Project Skyline program, a complex manufacturing transformation. The consultant will bring deep expertise in SAP security, SAP GRC, identity and access management, and enterprise controls, combined with hands-on delivery leadership. This individual will work directly with PMO and business workstream leads, advise senior client stakeholders on security and controls decisions, and lead a blended onshore/offshore delivery team to build a secure, compliant, and audit-ready SAP landscape.

Executive Advisory & Client Leadership

·         Partner with PMO leadership and business workstream leads to align SAP security design, controls, and delivery plans with overall program priorities.

·         Advise senior executives on SAP security architecture, enterprise controls, regulatory compliance, access risk, and cyber risk considerations.

·         Deliver executive-ready recommendations, roadmaps, status updates, and risk assessments that translate technical access and control issues into actionable business decisions.

·         Build and maintain senior client relationships that reinforce IBM’s position as a trusted partner for SAP security and controls transformation.

·         Prepare high-impact PowerPoint materials for steering committees, leadership discussions, and risk reviews, while maintaining program tools including ADO, JIRA, and Smartsheet.

SAP Security & GRC Delivery

·         Lead the SAP Security workstream across a complex, multi-tenant program, ensuring delivery aligns with project objectives, timelines, and governance expectations.

·         Hands-on, design and lead end-to-end SAP Security and GRC solutions across on-premises, cloud, and hybrid landscapes.

·         Hands-on direct SAP role design, Fiori authorization design, access governance, user provisioning/de-provisioning, privileged access management, and least-privilege access models.

·         Hands On SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, and user access reviews.

·         Provide expertise in SAP Identity Access Governance (IAG) bridge authentication with SAP GRC, and guide Okta integration for SAP authentication and identity lifecycle management.

·         Drive SoD risk analysis, remediation, mitigation control design, audit readiness, and sustainable access governance models, applying business process knowledge to align access design with manufacturing operations.

·         Apply AI-enabled methods to develop practical solution options and recommendations within short timelines.

SAP Cloud, SaaS & Platform Security

·         Lead SAP cloud and SaaS security across S/4HANA and related SAP cloud services.

·         Define practical controls and governance for SAP cloud platforms, including ownership, risk treatment, and audit evidence requirements.

Enable secure cloud adoption by aligning identity, authorization, provisioning, monitoring, and compliance requirements across SAP and connected applications.