> Markdown version of [/jobs/ext/1458934-sap-security-lead](https://www.wearedevelopers.com/jobs/ext/1458934-sap-security-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP Security Lead - **Company:** Slate Auto - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $141,807.0 - $212,710.0 - **Contract:** Permanent contract - **Skills:** SAP Cloud, Java (Programming Language), Identity and Access Management, IT Management, Intrusion Detection Systems, Systems Development Life Cycle, Ansible, SAP (Applications), SAP Configuration, SAP GRC, SAP HANA, SAP Project System, SAP Security, Cloud Platform System, IT General Controls (ITGC), Onapsis Platform, Sap Fiori, SAPBasis, Information Technology, SAP S/4HANA, RSA Archer Platform, Vulnerability Analysis - **Published:** July 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4bc934829456d8cb ## About the Role We are seeking a highly experienced SAP Security Lead to join our team. The ideal candidate brings 12+ years of SAP Security expertise, with a proven track record leading SAP security architecture across complex enterprise environments. This role demands deep knowledge of GRC Access Control, SOX ITGC compliance, HANA Security, and role design across S/4HANA landscapes., * 12+ years of SAP Security and Basis experience, with multiple full-lifecycle implementations. * Demonstrated leadership experience as SAP Security Lead on large-scale enterprise programs. * Hands-on expertise with GRC Tool such CPGRC, SAP GRC Access Control (Versions 10.x / 12.x) including ARM, EAM, UAR, and BRM. * Deep knowledge of SAP HANA Security, S/4HANA role architecture, and SAP Fiori authorization concepts. * Strong understanding of SOX ITGC controls, Segregation of Duties (SoD) principles, and audit evidence requirements. * Experience with S/4HANA upgrades. * Proficiency with PFCG, SU25, SUIM, and related SAP security administration tools. * Familiarity with SAP Cloud security and authorization group design. Preferred Qualification * SAP Certified Support Associate (CBOSUP90) or equivalent SAP security certification. * Experience with vulnerability assessment tools such as Onapsis. * Exposure to automation frameworks (e.g., Ansible playbooks for GRC integration tasks). * Experience working in GCP or other cloud-hosted SAP environments. * Familiarity with CPGRC and SDLC processes. * Master's degree in Computer Science or related field. ## Description * Lead SOX walkthrough activities as primary SME for all SAP ITGC controls, producing evidence packages for internal and external auditors (e.g., Deloitte, PwC, KPMG). * Maintain and remediate audit observations; ensure sustained auditor sign-off across review cycles. * Implement structured SOX audit readiness frameworks, supporting AuditBoard or equivalent GRC platforms. * Administer SAP GRC Access Control including Access Request Management, Role Management, and Emergency Access Management (Firefighter). * Design and automate quarterly User Access Review (UAR) programs with role-owner approval workflows and escalation logic. * Expand and maintain CPGRC or SAP GRC rulesets covering custom Z-transactions and Fiori apps for comprehensive SoD monitoring. * Architect and implement SAP security roles across S/4HANA, SAP Cloud Products, and PI/PO Java systems. * Apply SAP Best Practices, IT governance standards, and risk management principles in all role designs. * Perform SU25 and PFCG role adjustments during system upgrades and landscape changes. * Design granular roles for Technical Administrators, Developers, Power Users, and Business Users. * Implement and manage System IDs and service accounts using GRC AC workflows. * Support SAP system upgrades, landscape migrations, and cloud platform security initiatives. * Partner with Basis, Functional, Audit, and Business teams throughout the SDLC. * Design and deliver SAP training programs and internal workshops to build organizational capability. * Provide clear documentation and knowledge transfer to support operational continuity., At Slate, we're fueled by grit, determination, and attention to detail. The start-up spirit of ingenuity and resourcefulness move our business forward. Team Slate fosters a culture of excellence, innovation, and mutual respect, and is motivated by shared principles. * Safety First * Delight Customers * One Team * Relentless Improvement * Fast, Frugal, and Scrappy * Respectful Collaboration * Positive Legacy ## Related Videos - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) - [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023)