SAP Policy & Governance Manager

Role: SAP Security, Governance, Risk & Compliance (GRC)

Location: Parsippany, NJ

Work Mode: 4-days onsite

Duration: long term

Job Description –

The client is looking for a senior SAP Security & GRC professional (8–15+ years) with strong expertise in SAP role security, governance, SOX compliance, audit support, and access controls, combined with a solid understanding of SAP Finance (FI/CO) processes. The role is governance-focused rather than implementation-focused and requires close collaboration with Finance, Internal Audit, IT, HR, and Legal to ensure secure access, regulatory compliance, and effective policy management.

SAP Role Security & Governance –

• Lead the governance and administration of SAP role security, ensuring appropriate user access management in line with segregation of duties (SoD) and audit requirements.

• Establish role-based access controls (RBAC) within SAP to mitigate risks related to unauthorized access and data integrity.

• Collaborate with IT and internal audit teams to monitor and audit SAP security configurations, addressing any role conflicts or security gaps.

• Develop and enforce SAP access policies, ensuring compliance with internal controls, SOX, and IT security frameworks.

• Work with business process owners to define and implement role security requirements that align with operational needs.

• Provide oversight on user provisioning, deprovisioning, and periodic access reviews to ensure proper governance of SAP roles.

• Partner with IT to support SAP security updates, enhancements, and system integrations while maintaining compliance.

Risk & Compliance Management –

• Implement and oversee controls to ensure compliance with financial, IT, and operational policies.

• Conduct risk assessments related to policy governance and SAP security, identifying potential vulnerabilities and mitigation strategies.

• Support internal and external audits by providing documentation, evidence, and remediation plans related to policy compliance and SAP security.

• Develop dashboards and reporting mechanisms to track policy adherence and SAP security governance effectiveness.

Cross-Functional Collaboration & Leadership –

• Work closely with Finance, IT, Internal Audit, HR, and Legal teams to ensure alignment on policy, security governance and role definition initiatives.

• Provide leadership, training, and guidance on policy implementation and SAP security best practices.

• Develop and present executive reports on policy effectiveness, security compliance, and risk mitigation strategies.

Policy Management & Governance –

• Develop, implement, and maintain corporate policies and procedures to ensure compliance with internal controls, financial regulations, and operational best practices.

• Establish a policy governance framework, ensuring policies are regularly reviewed, updated, and communicated across the organization.

• Collaborate with senior leadership, legal, finance, and compliance teams to develop policies that align with business objectives and regulatory requirements (e.g., SOX, GDPR, GAAP), including clear RACI documentation

• Monitor and assess regulatory changes to ensure company policies remain compliant with industry and legal standards.

• Oversee the training and communication strategy for policies, ensuring employees understand and adhere to established guidelines.