> Markdown version of [/jobs/ext/1030868-senior-lead-sap-security-grc-compliance-pvh-corp](https://www.wearedevelopers.com/jobs/ext/1030868-senior-lead-sap-security-grc-compliance-pvh-corp). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Lead, SAP Security, GRC & Compliance- - PVH Corp.

- **Company:** PVH Corp.
- **Location:** Bridgewater, NJ, United States
- **Experience:** Expert
- **Salary:** $104,500.0 - $141,200.0
- **Contract:** Permanent contract
- **Skills:** System Configuration, Identity and Access Management, SAP ERP, SAP (Applications), SAP NetWeaver Business Warehouse, SAP GRC, SAP Project System, SAP Security, User Provisioning Software, RISE with SAP, Sap Fiori, Information Technology, SAP S/4HANA, Sap Extended Warehouse Management
- **Published:** June 19, 2026
- **Apply:** https://dejobs.org/x/x/6A257475CE534E4F89E0BC119EA23E32/job/

## About the Role

* Bachelor's degree in Computer Science or Accounting or related field is required., * Experience: Minimum of 8-10+ years of experience in SAP Security and GRC, with hands-on experience in configuration and implementation across various SAP landscapes (on-premise and cloud).
 * Technical Expertise: Knowledge of SAP security concepts (roles, profiles, authorization objects, SU24, PFCG) and proficiency in GRC Access Control, Process Control, and Risk Management modules. Experience with SAP ECC, SAP EWM, SAP S/4 and SAP RISE environments.
 * Compliance Knowledge: Understanding of compliance frameworks and security auditing techniques.
 * Problem-Solving: Analytical, problem-solving, and troubleshooting skills to diagnose complex security and access issues.
 * Communication: Communication skills, with the ability to translate complex technical security concepts into business-relevant language for non-technical stakeholders.

## Description

The Senior Lead, SAP Security, GRC & Compliance will act as a Subject Matter Expert (SME) for SAP Security & GRC including managing multiple SAP GRC instances, engaging with 3rd part operational support teams, managing features and functionality in the SAP GRC environment, planning upgrades and new features releases and overseeing key SOX controls for the SAP GRC environments., * Security Design: Developing and implementing SAP security, including role design, authorization objects, and user access controls across various SAP modules (S/4HANA, EWM, FMS CAR, Fiori, BW, ECC etc.).

 * GRC Configuration & Management: Configuring and managing SAP GRC modules, primarily Access Control (AC), Process Control (PC), and Risk Management, to automate security processes, manage risk assessments, and enforce compliance.
 * Access Management & Provisioning: Overseeing the user lifecycle, including user provisioning/deprovisioning, managing emergency access (e.g., "firefighter" access), and conducting regular access reviews to mitigate security risks.
 * Segregation of Duties (SoD) & Risk Analysis: Performing SoD and critical access (CA) analysis, developing/refining the GRC ruleset, and working with business process owners to define and manage mitigating controls.
 * Compliance & Audit Support: Ensuring compliance with internal policies and external regulations (e.g., SOX, GDPR, HIPAA, NIST, J-SOX). This includes supporting internal and external auditors by providing evidence, running reports, and resolving audit issues.
 * Incident Response & Monitoring: Monitoring SAP systems for suspicious activity, investigating security incidents, identifying vulnerabilities, and implementing corrective actions.
 * Collaboration & Guidance: Acting as a technical lead, providing guidance to business stakeholders and other IT teams (Basis, development, functional analysts) on security issues and best practices.
 * Documentation & Training: Creating and maintaining technical documentation, standard operating procedures, and delivering security awareness training to users and internal teams.


## Related Videos

- [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)
- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)