> Markdown version of [/jobs/ext/4600130-cyber-sap-internal-controls-manager-engineering-manager-ii](https://www.wearedevelopers.com/jobs/ext/4600130-cyber-sap-internal-controls-manager-engineering-manager-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber SAP Internal Controls Manager/ Engineering Manager II

- **Company:** Deloitte T.T.L.
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $134,500 - $265,100
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Information Systems, Identity and Access Management, Information Technology Operations, SAP ERP, SuccessFactors, SAP (Applications), Secure Coding, Software Security, SAP Ariba
- **Published:** November 6, 2026
- **Apply:** https://apply.deloitte.com/en_US/careers/Login?jobId=374449

## About the Role

* Ability to work independently and collaborate as part of a team
 * Effective written and verbal communication skills
 * Meticulous attention to detail and quality of work product
 * Ability to build and sustain professional relationships
 * Ability to lead projects or workstreams
 * Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
 * Strong interpersonal skills and professional demeanor
 * Ability to meet deadlines
 * Ability to mentor and provide clear guidance to others, Required:
 * Bachelor's degree in accounting, information systems, business, or a related field
 * 6+ years of experience designing and implementing internal controls (automated, -manual controls) in an SAP ERP environment

 * 3+ years of experience with key business processes (e.g., record to report, procure to pay, order to cash, etc.) and their inherent risks and controls

 * Experience evaluating SAP ERP configuration and translating business requirements into automated control designs; able to explain the configuration and control logic for at least 3 control examples.
 * Experience assessing risks and controls in at least 2 IT general control domains, such as access management, change management, or IT operations.
 * 3+ years of experience with segregation of duties frameworks and mitigating controls

 * 3+ years' experience applying SOX or comparable regulatory requirements to SAP ERP controls, including supporting control documentation, testing, or remediation

 * Ability to travel 50%, on average, based on the clients and industries/sectors you serve and specific project requirements
 * Limited immigration sponsorship may be available

Preferred:

 * Experience with SAP ERP implementations or transformations
 * Experience with automated solutions for continuous control monitoring, access management, cloud governance, etc. (e.g., SAP Process Control, SAP Identity Access Governance)
 * Experience with controls for SAP ERP Cloud applications (e.g., SuccessFactors, Ariba, Concur, Business Technology Platform, etc.)
 * Experience with pre-go live control testing, audit support, or compliance programs
 * Professional certifications such as CPA, CISA, CIA, CRISC, or SAP certifications
 * Experience working in consulting or professional services environments

## Description

As a Manager on the Cyber Enterprise Security team, you will:

 * Lead the assessment of business-process and technology risks arising from transformation and implementation initiatives, translating findings into implications for the client's risk and controls environment.
 * Own the SAP controls workstream across business, functional, and technical teams; connect SAP configurations and custom development to practical, risk-based control requirements.
 * Direct the design of automated and manual business process controls across SAP-enabled processes and IT general controls, ensuring the design addresses identified risks and can be implemented and sustained.
 * Advise clients on controls for AI-enabled business processes and contribute to the design and implementation of fit-for-purpose AI governance.
 * Facilitate executive and working-level workshops to align stakeholders on risk priorities, control design decisions, ownership, and implementation readiness.
 * Oversee segregation-of-duties and critical or sensitive access analyses; recommend and help define appropriate mitigating controls.
 * Plan and oversee control design testing, evaluate evidence and results, resolve gaps with stakeholders, and communicate findings and remediation needs.
 * Apply relevant regulatory requirements, including SOX where applicable, to controls design, testing, and supporting documentation.
 * Lead transition and knowledge-transfer activities so control owners and stakeholders understand their responsibilities and are prepared to operate the controls.
 * Manage engagement with internal audit, compliance, and other assurance stakeholders, aligning on control objectives, evidence needs, and issue resolution.
 * Coordinate with client and delivery teams to govern control deployment, track dependencies and risks, and support readiness for implementation or go-live.
 * Own the quality and timely delivery of work products-including risk and control matrices, test procedures, job aids, impact assessments, and other controls documentation.
 * Guide and develop team members, review their work, and manage workstream priorities, progress, and deliverable quality.