SAP Security Delivery Lead

Duration: 12 months (possible conversion to full-time after 1 year)
Location: Fully Remote
Industry: Regulated / Secure Enterprise Environment

Overview
We are seeking an experienced SAP HANA Security Delivery Lead to support enterprise SAP security, governance, compliance, and vulnerability management initiatives. This role will focus on audit readiness, patch strategy coordination, SAP security operations, and compliance alignment across regulated cloud environments.
The ideal candidate brings deep expertise across SAP HANA security, SAP GRC, compliance frameworks (SOC 2 / NIST / FedRAMP), and vulnerability remediation programs, along with experience supporting secure ERP platforms at scale.

Key Responsibilities
Governance, Risk & Compliance

• Support internal and external audits including evidence collection, control testing, and remediation tracking
• Participate in governance and compliance discussions related to SAP security posture
• Contribute to compliance program maturity initiatives (SOC 2, CMMC)
• Apply working knowledge of NIST and SAP ITcontrols to operational security solutions

Security Operations & Vulnerability Management

• Partner with cross-functional operations teams to prioritize and remediate vulnerabilities and misconfigurations
• Assist with enterprise security assessments across SAP platform environments
• Analyze SAP Notes and patch releases to strengthen system security posture

Patch & Configuration Management

• Coordinate installation of security patches, upgrades, and product updates
• Develop mitigation strategies for patch risk and remediation timelines
• Provide expertise applying SAP security hotfixes and updates
• Assess operational risk when patch deferral is required and document mitigation strategies

Required Qualifications

• Strong experience supporting SOC 2, NIST, and FedRAMP-aligned environments
• Hands-on expertise with:
  • SAP GRC
  • SAP Fiori authorization concepts
  • SAP HANA database security
• Experience managing vulnerability and configuration remediation programs
• Experience working within regulated enterprise or government-aligned environments
• Proficiency with ServiceNow
• Ability to translate technical security findings into actionable guidance for leadership
• Experience supporting SAP or ERP platforms in cloud-hosted environments

Preferred Skills

• Experience with cloud security architectures (IaaS, PaaS, SaaS)
• Exposure to CMMC compliance initiatives
• Background supporting enterprise-scale SAP security delivery programs

#LI-KD1