E

Ernst & Young

Global professional services: consulting, assurance, tax

Risk Consulting - Risk Technology, SAP GRC & Security, Manager

Implementation & Technical Account ManagementUpdated on Nov 14
Full-timeNew York, NY, USA$142.6k - $297.2k

About the Job

Requirements

  • Experience deploying large-scale, cross-functional, globally distributed, complex SAP transformation projects, with in-depth knowledge of SAP Application Security and SAP GRC Access Control solutions supporting access management compliance.
  • Design and develop SAP Security solutions across SAP applications, including on-premises, cloud, and SaaS, in accordance with business requirements and security, compliance, and regulatory standards.
  • Experience leading SAP Security and GRC projects, including managing onshore and offshore teams throughout the project life cycle.
  • Participate in internal and external SAP audit discussions, answer questions, and help resolve governance and compliance issues.
  • Communicate across internal and external functions to identify and document functional requirements.
  • Maintain expertise in SAP Security and GRC by keeping abreast of industry developments, practices, and trends.
  • Coach and develop teams and colleagues, providing knowledge, skills, and opportunities to support delivery.
  • Identify and manage business development opportunities.
  • Have 6 or more years of experience in an SAP Security and GRC lead role.
  • Have a preferred bachelor's or master's degree in Computer Science, Information Security, Information Management Systems, or a related field.
  • Have hands-on experience designing, building, testing, and deploying application security frameworks across SAP S/4, Fiori, ECC, Ariba, HCM, and SuccessFactors.
  • Have strong SAP GRC Access Control implementation experience, including version 12.0 or other GRC Access Control technologies, and integration knowledge of IAM tools such as Saviynt, SailPoint, or SAP IAG.
  • Have experience designing processes to review segregation of duties, critical actions, temporary emergency management, and user provisioning.
  • Have working experience designing risk frameworks or rulesets to comply with segregation of duties and critical actions across business processes.
  • Understand how to assess, define, and align SAP application security with risk and controls frameworks.
  • Support multiple projects while adapting to shifting priorities and changing environments or landscapes.
  • Have strong project management, team management, and client service skills.
  • Hold a valid US driver's license and valid passport.
  • Be willing to travel to meet client needs; estimated travel is 80%.

Responsibilities

  • Connect with clients to design and implement business processes in SAP ERP through transformation journeys involving Application Security, GRC Access Control, or similar SaaS offerings.
  • Use internal teams, networks, intellectual property, and lessons learned to support client implementations.
  • Draw on implementation and client experience to help clients implement effective designs and manage organizational change.
  • Build strong client relationships and help clients address complex issues.

Desired Qualifications

  • SAP HANA database security experience.
  • Experience with ticketing tools such as ServiceNow or HP ALM.
  • Industry-related certification such as CISA, PMP, CIA, or RICS; non-certified hires must become certified within one year of hire.
  • SAP Application Security and GRC Access Control certification.
  • Knowledge of SAC, BTP, AI, and RPA.
  • Knowledge of SAP audit processes and regulatory or compliance frameworks such as GDPR, JSOX, and KSOX.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs