SAP Security Team Lead

Job Summary

The SAP Security Team Lead leads the SAP Security team and is accountable for the SAP ERP application security architecture, including user provisioning, authentication, authorization, and application-level security. Provides day-to-day direction, work prioritization, and technical guidance to SAP Security Analysts, and serves as the primary escalation point for complex security issues. Owns the role-based authorization model, SAP GRC (or similar) security tooling, and segregation of duties (SOD) program, partnering with business process owners, IT teams, and Security, Compliance, Risk and Audit to ensure SAP systems remain secure, compliant, and aligned with documented security policies.

Responsibilities

Essential Functions

• Leads the SAP Security team, assigning and prioritizing work, setting expectations, and ensuring timely, high-quality delivery of security requests, projects, and support.
• Provides technical direction, coaching, and mentoring to SAP Security Analysts; supports onboarding, training, and development of team members.
• Owns the SAP security architecture and role-based authorization model, including role design standards, naming conventions, and centralized role management across S/4HANA, Fiori, and BI.
• Reviews and approves role designs, changes, and user provisioning processes to ensure adherence to SAP Security best practices and documented policies.
• Accountable for the effectiveness and governance of SAP GRC capabilities, including access request management, risk analysis, emergency access, and access certification.
• Owns the segregation of duties (SOD) ruleset and process, including risk analysis, mitigating controls, and monitoring of sensitive access and elevated privileges.
• Serves as the primary point of contact for internal and external audits; coordinates audit evidence, explanations of operational processes, and remediation of findings.
• Partners with Security, Compliance, Risk and Audit teams, business process owners, and IT leadership to ensure a compliant solution is maintained and to educate stakeholders on security and SOD.
• Serves as the escalation point for complex SAP security issues; drives root cause analysis and resolution.
• Leads the security workstream for projects, upgrades, and new functionality, mapping current state to future state processes and identifying and closing security gaps.
• Evaluates future SAP software releases and third-party SAP add-on systems for security impact and applicable functionality.
• Develops and maintains team procedures, standards, and metrics; identifies and leads continuous improvement initiatives to reduce operational time and cost.
• Proactively puts forth recommendations to address forecasted risks and the changing technology environment.
• Provides strategic guidance and recommendations to IT leadership regarding SAP security risks, emerging technologies, compliance requirements, and future capability needs.

Non-essential Functions

• Provides input to the Director on team staffing, workload planning, and performance feedback for team members.
• Maintains and publishes SAP security documentation, help documents, and work instructions.
• Leads security-related business continuity and disaster recovery planning and maintains related test documentation.
• Creates, facilitates, and contributes to training on security best practices and application functionality.
• Works effectively as a team with all Border States personnel.
• Perform other duties as assigned by supervisor or designate.

Qualifications

• 4 Year STEM Degree or equivalent experience.
• 7+ years of Security Engineering experience or related IT field, including 5+ years of hands-on SAP security experience.
• 2+ years of experience leading teams, projects, or workstreams; prior lead or supervisory experience preferred.
• 5+ years of design/configuration experience with SAP GRC or another SAP security tool.
• Strong knowledge and working experience with S/4HANA, Fiori, and BI reporting security, and integration between SAP FI, MM, and SD modules.
• Experience with integration to Identity Management Systems for provisioning, and with Directory Services for Authentication.
• Extensive experience running Segregation of Duties (SOD) risk analysis, mitigating controls, and monitoring sensitive access and elevated privileges.
• Demonstrated experience supporting and leading internal and external audits (e.g., SOX).
• Experience with third party SAP add-on systems (Logistics, Procurement), preferred.
• Broad understanding of various aspects of Application Security for ERP solutions.
• Excellent working knowledge of PC, Windows, Microsoft Office (Excel, Access, Word, and PowerPoint), Internet, and Outlook. SAP experience required.

Skills and Abilities

• Demonstrated leadership ability: sets direction, delegates effectively, and develops team members.
• Excellent interpersonal and customer service skills; courteous, responsive, accurate, and engaged.
• Communicates effectively with diverse audiences (technical and non-technical, including senior leaders and auditors) through written, verbal, and virtual channels.
• Able to lead, influence, and collaborate across functions, levels, and geographies.
• Skilled in planning, prioritizing, and managing multiple priorities and projects in a fast-paced environment.
• Strong analytical and problem-solving skills, including root cause analysis.
• Able to gain consensus, make informed decisions, and take ownership of results.
• Executes plans and delivers measurable outcomes under pressure.
• Proactive and self-motivated with a positive, can-do attitude.
• Open to feedback, aware of personal strengths and areas for growth, and committed to continuous improvement.
• Builds and maintains effective working relationships, ensuring satisfaction and resolving issues promptly.

Physical Requirements

Frequency at which you would carry/lift in a typical day:
Occasionally 0 – 33% Frequently 34 – 66% Continuously: 67 – 100%

• Lift from Waist:
  • < than 10 lbs. - Not at all
  • 10 to 25 lbs. - Not at all
  • 26 to 50 lbs. - Not at all
  • 51 to 75 lbs. - Not at all
  • 75 to 100 lbs. - Not at all
  • 100+ lbs. - Not at all
• Lift from Floor:
  • < than 10 lbs. - Frequently
  • 10 to 25 lbs. - Occasionally
  • 26 to 50 lbs. - Occasionally
  • 51 to 75 lbs. - Not at all
  • 75 to 100 lbs. - Not at all
  • 100+ lbs. - Not at all
• Carried for Distance:
  • < than 10 lbs. - Not at all
  • 10 to 25 lbs. - Not at all
  • 26 to 50 lbs. - Not at all
  • 51 to 75 lbs. - Not at all
  • 75 to 100 lbs. - Not at all
  • 100+ lbs. - Not at all

Physical Activity

Frequency at which you would do the following in a typical day:

• Sitting (a continuous period of being seated) - Continuously
• Standing (for sustained periods of time) - Frequently
• Walking (moving about on foot to accomplish tasks) - Frequently
• Bending/stooping (downward and forward) - Occasionally
• Crawling (moving about on hands and knees or hands and feet) - Not at all
• Climbing/Walking Stairs (ascending or descending) - Occasionally
• Reaching (extending arms in any direction) - Frequently
• Crouching/squatting (bending the body downward and forward by bending leg and spine) - Occasionally
• Kneeling (bending legs at knee to come to rest on knee(s)) - Occasionally
• Balancing (maintaining body equilibrium to prevent falling) - Occasionally
• Repetitive motion (substantial movement (motions) or the wrists, hands, and/or fingers) - Continuously
• Pivoting (movement in any direction with one foot, keeping the other in contact with the floor) - Occasionally
• Pushing/Pulling (using upper extremities to press against or draw or tug) - Occasionally
• Grasping (Applying pressure to an object with the fingers and palm) - Continuously
• Fingering (picking, pinching, typing; working with primarily fingers and not whole hand) - Continuously
• Talking (expressing or exchanging ideas by means of the spoken word) - Frequently
• Driving (the control and operation of a motor vehicle) - Occasionally
• Desk work (work usually performed at a desk) - Continuously
• Use of a computer - Continuously
• Use of a telephone - Frequently
• Hearing (Perceiving the nature of sounds at normal speaking levels) - Frequently
• Exposure (to adverse weather & temperature conditions) - Not at all
• Travel (travel needed to perform job duties) - Occasionally

Additional Information

This job description is a summary of the job duties and responsibilities and is not intended to cover all possible job duties and is subject to change at the employer’s discretion. Employees must be able to perform the essential job duties and satisfy job requirements either with or without a reasonable accommodation.