SAP Security Manager

We’re a family-owned company with a 90+ year legacy, that’s consistently recognized as a Glassdoor “Best Places to Work.” We have130+ brands in our total alcohol beverage portfolio including wine, malt, spirits, and ready-to-drink beverages. We’re home to the #1 wine and spirits brands in the U.S. - Barefoot Wine & High Noon and are the official sponsors of the NFL, NHL, UFC, and PGA of America.

View our Corporate Values and Mission Statement here.

A Taste of What You’ll Do

At Gallo, we believe great security enables great business. As an SAP Security Manager, you’ll play a critical role in protecting and enabling our SAP landscape while leading a team that partners closely with IT and the business. This role sits at the intersection of governance, risk, compliance, and operational excellence-ensuring the right access, the right controls, and the right outcomes.

You’ll guide and develop a team of SAP Security Administrators and Analysts, providing both strategic direction and hands-on expertise. From designing and maintaining security roles to supporting GRC processes and audit readiness, your work will directly impact how our systems support finance, supply chain, customer management, and beyond. You’ll collaborate with functional and technical partners to embed strong access controls into evolving business processes while adapting to new technologies and platforms.

This is an opportunity to shape SAP security practices across development, testing, and production environments while helping Gallo maintain compliance with IT general controls and regulatory expectations. You’ll influence standards, improve processes, and contribute to the long-term SAP security strategy-all while modeling intrapreneurship, ownership, and accountability. If you thrive in a leadership role where trust, collaboration, and continuous improvement matter, this is your chance to make a lasting impact.

• Master’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 5 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 11 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility.

• Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation. This may be in addition to travel requirements, if applicable, as listed in this job description.

• Required to be 18 years or older. This may be in addition to other age requirements, if applicable, as listed in this job description.

How You’ll Stand Out

• Master’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 9 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 13 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility.

• 7 years of experience with SAP GRC Access Control/Process Controls Suite, including implementation, upgrades, or rollouts, with hands-on implementation skills across ARA, EAM, ARM, and BRM modules.

• Experience supporting SAP ECC or S/4HANA security implementations or operations, including SOD conflict resolution, role design, user administration, and Fiori or SAP HANA-enabled environments.

We are committed to providing competitive compensation, perks, and a culture that supports your well-being. Benefits depend on your work category and may include medical and dental coverage, 401k plans, profit sharing, pet insurance, company holidays, access to an employee wine shop, and more! Additional information will be provided before your first interview.

The Fine Print

• The Company does not sponsor for employment-based visas for this position now or in the future.
• Actual compensation paid within the range will be determined by factors such as the education, experience, knowledge, skills and abilities of the applicant, internal equity, and alignment with market data.In addition to the salary, this position may be eligible for bonuses, incentive plans, or participate in tasting room tip pools, as applicable.
• This position will be based in the location(s) specified in the job posting with an option for occasional telecommuting. You will be expected to live within a commutable distance.
• It is the Company’s policy for job postings to be open to internal candidates for a minimum of 5 days and to external candidates, if applicable, for a minimum of 3 days.

Gallo’s policy is to afford equal employment opportunities to all applicants and employees and not to discriminate on the basis of race, traits associated with race, including but not limited to, hair texture and protective hairstyles (such as braids, locks, and twists), color, national origin, ancestry, creed, religion, physical disability, mental disability, medical condition as defined by applicable state law (including cancer and predisposing genetic characteristics), genetic information, marital status, familial status, sex, gender, gender identity, gender expression, sexual orientation (actual or perceived), transgender status, sex stereotyping, pregnancy, childbirth or related medical conditions, reproductive health decision making, age, military or veteran status, domestic violence or sexual assault victim status, or any other basis protected by applicable law. Nor will Gallo discriminate based on a perception that an individual has any of the foregoing characteristics or is associated with a person who has, or is perceived to have, any of those characteristics.

Gallo will comply with state and local laws prohibiting discrimination for lawful out-of-work behavior, such as off-duty use of cannabis away from the workplace (subject to federal and state law exceptions), the existence of non-psychoactive cannabis metabolites in hair, blood, urine, or other bodily fluids as determined by a drug screening test (subject to federal and state law exceptions).

We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Gallo is committed to providing reasonable accommodation for candidates with disabilities in our recruiting process. If you need any assistance or accommodation due to a disability, please let us know at 209.341.7000.

Gallo is enrolled in the Department of Homeland Security’s E-Verify program and will use the program to verify the employment eligibility of all newly hired employees as required.

E-Verify Notice

Right to Work

Employee Polygraph Protection Act