Role: Enterprise security architect (sap focus)
Location: Wickliffe OH (Hybrid Onsite)
Duration: 12+ Months
Interview Mode: Video
The role is based in Wickliffe OH, with occasional travel required to other company offices, project sites, or industry events as needed.
The Enterprise Security Architect is a strategic and technical leader embedded within the Enterprise Architecture team, working in close partnership with SAP and Information Security teams. The role is responsible for designing and governing the enterprise-wide security and access architecture, focusing strongly on SAP security and access frameworks. Success in this position requires not only technical depth but also a strong grasp of business process architecture as it relates to security design-ensuring that controls and access models align seamlessly with core business operations. The architect ensures robust, scalable, and compliant solutions that support business priorities, regulatory requirements, and IT strategies, serving as a trusted advisor on security for SAP and related platforms.
Key Responsibilities
Design, develop, and govern the implementation of holistic enterprise security and access architecture, with an emphasis on SAP and integrated ERP environments, ensuring alignment with underlying business process architecture.
Partner with SAP, Information Security, and Infrastructure teams to establish and enforce security standards, policies, and procedures, ensuring consistent adoption across business units while supporting business process efficiency and compliance.
Lead SAP security design strategies, including user provisioning, access control models, role-based security, segregation of duties, and privileged access management, all in close conjunction with the organization's business process architecture.
Oversee and participate in the integration of SAP security solutions with identity and access management tools (e.g., Saviynt), establishing seamless user lifecycle management processes connected to business processes.
Advise on and coordinate the deployment, configuration, and ongoing management of SAP GRC (Governance, Risk, and Compliance), supporting compliance with SOX, GDPR, and other regulations while mapping controls to business process risks.
Collaborate with audit and compliance teams to ensure all SAP and related systems are in line with internal and external standards; address findings and drive
remediation efforts as needed, always with consideration to business process impacts.
Contribute to security architecture reviews for new initiatives, SAP projects, migrations, integrations, and cloud transformations, ensuring risks are identified and mitigated within the context of business process architecture.
Monitor the evolving threat landscape, evaluate emerging technology and security trends, and recommend innovative practices to strengthen the security posture of SAP and connected systems, with full awareness of their intersection with business processes.
Develop and deliver engaging training and awareness programs focused on SAP security and access management for technical and business stakeholders, highlighting the importance of business process alignment.
Mentor and guide junior security team members, sharing expertise, best practices, and providing technical leadership across security initiatives.
Generate and maintain documentation for architectures, security controls, and processes related to SAP and integrated applications, with clear mapping to business processes where relevant.
Required Qualifications
Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field; advanced degree preferred.
Substantial experience (typically 8+ years) in enterprise security architecture, with a strong background in SAP security design, deployment, and management.
In-depth knowledge of SAP platforms (ECC, S/4HANA, Fiori, etc.) and their associated capabilities.
Demonstrated expertise with SAP GRC, including Access Control, Process Control, and Risk Management modules.
Hands-on experience integrating SAP with identity and access management solutions such as Saviynt, SailPoint, or similar (cloud and on-premise).
Comprehensive understanding of security and access management best practices, including IAM, RBAC, ABAC, and privileged access management.
Practical knowledge of business process architecture and its interdependencies with enterprise security and access management frameworks.
Strong grasp of compliance frameworks, audit requirements, and regulatory obligations affecting SAP environments (e.g., SOX, GDPR, ISO 27001).
Outstanding project management, communication, and stakeholder engagement skills.
Professional certifications such as CISSP, CISM, SAP Security, SAP GRC, or equivalent are highly desirable.
Desired Skills & Attributes
Strategic thinker and technical leader with the ability to influence and drive security initiatives across diverse teams.
Ability to communicate complex technical concepts to non-technical audiences, bridging business and IT perspectives.
Experience working in large-scale, multi-national enterprise settings with cross-functional and virtual teams.
Strong analytical, troubleshooting, and problem-solving capabilities.
Dedication to continuous learning, professional growth, and staying current on SAP and cybersecurity advancements.
Never miss an opportunity! Create an alert based on the job you applied for.
