- Is industry experience needed for this role and why?: CPG Industry
- Audit Skills
- Working with BIG 4 in IT Audit in SAP
POSITION OVERVIEW: Seeking an experienced SAP Security Subject Matter Advisor (SMA) to lead the evaluation, integration, and alignment of application security requirements across SAP platforms. The ideal candidate will bridge technical architecture with strict SOX compliance and audit standards to ensure robust risk management within a Consumer Packaged Goods (CPG) environment.
DAY-TO-DAY RESPONSIBILITIES
Review and integrate end-to-end application security requirements and technical architectures across SAP platforms.
Evaluate and enforce SOX compliance controls and SAP business process controls.
Collaborate with cross-functional teams to align application security architectures with business drivers and risk frameworks.
Provide expert guidance and final recommendations regarding overall application security decisions.
Conduct and support internal/external IT security audit procedures to identify and remediate control gaps.
Interface with stakeholders to ensure security architectures meet CPG industry compliance and operational goals.
REQUIRED SKILLS
IT Security Controls on SAP Platform (8 10 years)
SOX Audit & Compliance Controls (8 10 years)
SAP Business Process Controls (8 10 years)
ADDITIONAL DESIRED SKILLS
IT Audit / Big 4 Consulting experience in SAP environments
CPG (Consumer Packaged Goods) Industry Experience
Advanced Application Security Architecture knowledge
CANDIDATE PROFILE
An authoritative, detail-oriented SAP Security Advisor with a strong background in IT audit and business process controls. The ideal profile combines deep hands-on expertise in SAP platform security with a rigorous approach to SOX compliance, ideally honed in Big 4 or large-scale enterprise CPG environments.
Job Responsibilities
Review, design, and integrate application security requirements for SAP platforms.
Oversee and optimize SOX IT controls and SAP business process controls.
Partner with technical and business teams to evaluate risk, support audits, and ensure compliance.
Provide actionable insights and recommendations on application security architecture.
