Back to Jobs

SAP Security Subject Matter Advisor

Not Disclosed

Job Description & Details

This is a heavy-hitting governance and security role focused squarely on locking down complex SAP environments within the Consumer Packaged Goods sector. If you enjoy the intersection of deep technical application security architecture and rigid SOX compliance without getting bogged down in writing production code every day, this gig sits right in your wheelhouse.

What You'll Actually Be Doing

Your day-to-day will revolve around reviewing end-to-end security requirements, evaluating business process controls, and serving as the primary bridge between technical teams and external auditors. You will spend a lot of time analyzing control gaps, designing robust mitigation strategies, and making executive-level recommendations on how to structure SAP permissions and architectures to keep compliance officers happy while letting the business actually operate.

The Core Tech Stack

You need absolute mastery over IT security controls specifically built on the SAP platform, paired with a decade of hands-on experience navigating SOX audit requirements. Having a background working in a Big 4 consulting environment auditing SAP is practically a prerequisite here, and previous exposure to the CPG industry will give you a massive leg up because you already understand supply chain and ERP segregation-of-duties pain points.

Interview Expectations

Expect the hiring panel to hit you with a scenario where a critical business process conflicts directly with a strict SOX segregation of duties control; they want to see how you balance risk mitigation with operational reality. You should also be ready to explain a time you successfully managed a massive external IT audit shortfall in SAP and walked away with a clean remediation plan.

Application Advice

Make sure your resume doesn't just read like a list of technical tools; you need to prominently feature your governance wins, specifically highlighting terms like "SOX compliance," "SAP business process controls," and "IT audit." If you have Big 4 or CPG industry experience, put those front and center right at the top of your summary to easily clear the ATS filters.