Director – SAP Role Security & Compliance

At Gilead, we’re creating a healthier world for all people. For more than 35 years, we’ve tackled diseases such as HIV, viral hepatitis, COVID-19 and cancer – working relentlessly to develop therapies that help improve lives and to ensure access to these therapies across the globe. We continue to fight against the world’s biggest health challenges, and our mission requires collaboration, determination and a relentless drive to make a difference.
 

Every member of Gilead’s team plays a critical role in the discovery and development of life-changing scientific innovations. Our employees are our greatest asset as we work to achieve our bold ambitions, and we’re looking for the next wave of passionate and ambitious people ready to make a direct impact.
 

We believe every employee deserves a great leader. People Leaders are the cornerstone to the employee experience at Gilead and Kite. As a people leader now or in the future, you are the key driver in evolving our culture and creating an environment where every employee feels included, developed and empowered to fulfill their aspirations. Join Gilead and help create possible, together.

Job Description
 

Director, SAP Role Security & Compliance

Job Description

The Director, SAP Role Security & Compliance leads the SAP-specific capabilities required to deliver and operate secure, compliant, and well-tested ERP solutions. Reporting within the SAP organization, this role owns execution across SAP security, testing, and compliance while partnering with enterprise control functions on policies, standards, and oversight.

This role is an onsite position located at our Foster City, CA headquarters or at our Raleigh, NC office. We do offer a hybrid environment with 3 days in the office and 2 days optional work from home (Monday & Friday).

Key Responsibilities

Strategy & Business Partnership

• Own the strategy for SAP role security, testing, and compliance capabilities across the SAP ERP landscape.
• Establish the multi-year roadmap and investment priorities needed to strengthen SAP security, testing, compliance, and operational readiness.
• Partner across architecture, business, and delivery functions to align SAP security, testing, and compliance priorities with business objectives.
• Translate enterprise security, risk, and compliance requirements into SAP-specific standards, delivery practices, and operational controls.
• Define and track measures that demonstrate improved risk management, compliance, operational performance, and business value.

Delivery & Operational Excellence

• Ensure SAP role security, testing, and compliance commitments are met across projects, releases, and sustainment operations.
• Lead SAP role security operations, access governance, segregation-of-duties management, testing, and compliance execution across projects, releases, and sustainment operations.
• Oversee cross-functional teams and delivery partners to manage dependencies, resolve issues, and coordinate execution from design through production support.
• Oversee role security reviews, testing strategy, release readiness, audit support, remediation, and continuous improvement, coordinating with the validation function to meet applicable requirements.
• Ensure controls, documentation, evidence management, and operational metrics support regulatory requirements, corporate policies, and audit expectations.
• Drive standardization, automation, and process improvements that enhance efficiency, compliance, and operational maturity.

Leadership

• Lead the SAP Role Security & Compliance organization across project delivery and sustainment operations.
• Establish clear ownership, priorities, performance expectations, and execution discipline across internal teams and external partners.
• Build and develop accountable, customer-focused teams with expertise in SAP role security, SAP GRC collaboration, testing, compliance/validation, and audit support.

• Hold managed service providers, system integrators, and other delivery partners accountable for performance and outcomes.

• Influence senior business and IT leaders on roadmap priorities, investments, risk mitigation strategies, operating model decisions, and capability maturity.

• Provide senior leaders and governance forums with clear visibility into priorities, material risks, compliance status, operational performance, and required decisions.

 

Key Skills & Experience

• Bachelor's degree in Information Technology, Computer Science, or a related discipline; advanced degree preferred.
• 12+ years of progressive experience leading SAP security, testing, compliance, or related ERP capabilities in complex enterprise environments.

• Deep experience with SAP security, authorization concepts, access governance, privileged access management, segregation of duties, and SAP GRC solutions.

• Demonstrated experience leading SAP testing and release readiness in regulated environments and partnering with the validation function to meet applicable requirements.
• Experience supporting SAP S/4HANA, SAP BTP, cloud technologies, and large-scale ERP transformation programs.
• Strong knowledge of security, quality, and compliance requirements for regulated SAP environments, including SOX and ITGC controls and the impact of GxP requirements on SAP delivery.
• Proven ability to lead global teams and manage external delivery partner relationships.
• Demonstrated experience setting direction and delivering sustained improvements across global ERP capabilities.
• Track record of strengthening operational resilience, reducing risk, standardizing delivery practices, and achieving measurable business outcomes.
• Strong business partnership and executive communication skills, with the ability to present strategy, investment priorities, operational performance, risks, and outcomes to senior leadership and governance forums.

The salary range for this position is:

Bay Area: $210,375.00 - $272,250.00.Raleigh: $181,730.00 - $235,180.00.

Gilead considers a variety of factors when determining base compensation, including experience, qualifications, and geographic location. These considerations mean actual compensation will vary. This position may also be eligible for a discretionary annual bonus, discretionary stock-based long-term incentives (eligibility may vary based on role), paid time off, and a benefits package. Benefits include company-sponsored medical, dental, vision, and life insurance plans*.

For additional benefits information, visit:

https://www.gilead.com/careers/compensation-benefits-and-wellbeing

* Eligible employees may participate in benefit plans, subject to the terms and conditions of the applicable plans.

For jobs in the United States:

Gilead Sciences Inc. is committed to providing equal employment opportunities to all employees and applicants for employment, and is dedicated to fostering an inclusive work environment comprised of diverse perspectives, backgrounds, and experiences. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, sex, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job related characteristics or other prohibited grounds specified in applicable federal, state and local laws. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans' Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact [email protected] for assistance.

For more information about equal employment opportunity protections, please view the 'Know Your Rights' poster.

NOTICE: EMPLOYEE POLYGRAPH PROTECTION ACT
YOUR RIGHTS UNDER THE FAMILY AND MEDICAL LEAVE ACT

Gilead Sciences will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, (c) consistent with the  legal duty to furnish information; or (d) otherwise protected by law.
 

Our environment respects individual differences and recognizes each employee as an integral member of our company. Our workforce reflects these values and celebrates the individuals who make up our growing team.

Gilead provides a work environment free of harassment and prohibited conduct. We promote and support individual differences and diversity of thoughts and opinion.

For Current Gilead Employees and Contractors:

Please apply via the Internal Career Opportunities portal in Workday.