> Markdown version of [/jobs/ext/95817-sap-security-manager](https://www.wearedevelopers.com/jobs/ext/95817-sap-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP Security Manager - **Company:** Gallo LLP - **Location:** Modesto, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $151,000.0 - $226,600.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Middleware, SAP ERP, Network Administration, SAP GRC, SAP HANA, SAP Security, Software Engineering, IT General Controls (ITGC), Sap Fiori, SAPBasis, Information Technology, SAP S/4HANA, User Administration - **Published:** May 19, 2026 - **Apply:** https://jobs.localjobnetwork.com/job/detail/87199134/SAP-Security-Manager ## About the Role * Master's degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 5 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor's degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 11 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility. * Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation. This may be in addition to travel requirements, if applicable, as listed in this job description. * Required to be 18 years or older. This may be in addition to other age requirements, if applicable, as listed in this job description. How You'll Stand Out * Master's degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR Bachelor's degree in Information Security, Cybersecurity, Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 9 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility; OR High school diploma or State-issued equivalency certificate plus 13 years of experience spanning at least two IT disciplines, including Information Security, Technical Architecture, Network Management, Application Development, Middleware, Database Management, Business Intelligence, or Operations reflecting increasing levels of responsibility. * 7 years of experience with SAP GRC Access Control/Process Controls Suite, including implementation, upgrades, or rollouts, with hands-on implementation skills across ARA, EAM, ARM, and BRM modules. * Experience supporting SAP ECC or S/4HANA security implementations or operations, including SOD conflict resolution, role design, user administration, and Fiori or SAP HANA-enabled environments. ## Description We're a family-owned company with a 90+ year legacy, that's consistently recognized as a Glassdoor "Best Places to Work." We have130+ brands in our total alcohol beverage portfolio including wine, malt, spirits, and ready-to-drink beverages. We're home to the #1 wine and spirits brands in the U.S. - Barefoot Wine & High Noon and are the official sponsors of the NFL, NHL, UFC, and PGA of America. View our Corporate Values and Mission Statement here. A Taste of What You'll Do At Gallo, we believe great security enables great business. As an SAP Security Manager, you'll play a critical role in protecting and enabling our SAP landscape while leading a team that partners closely with IT and the business. This role sits at the intersection of governance, risk, compliance, and operational excellence-ensuring the right access, the right controls, and the right outcomes. You'll guide and develop a team of SAP Security Administrators and Analysts, providing both strategic direction and hands-on expertise. From designing and maintaining security roles to supporting GRC processes and audit readiness, your work will directly impact how our systems support finance, supply chain, customer management, and beyond. You'll collaborate with functional and technical partners to embed strong access controls into evolving business processes while adapting to new technologies and platforms. This is an opportunity to shape SAP security practices across development, testing, and production environments while helping Gallo maintain compliance with IT general controls and regulatory expectations. You'll influence standards, improve processes, and contribute to the long-term SAP security strategy-all while modeling intrapreneurship, ownership, and accountability. If you thrive in a leadership role where trust, collaboration, and continuous improvement matter, this is your chance to make a lasting impact. ## Related Videos - [Evolving the developer experience in the age of AI](https://www.wearedevelopers.com/videos/100201-evolving-the-developer-experience-in-the-age-of-ai) - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) ## Related Articles - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)