SAP Security Manager

Overview

As part of the Corporate Services organization at Waters Corporation, this role will provide global leadership for the Security workstream supporting future SAP S/4HANA releases, upgrades, and transformation initiatives. The Sr Manager will own and coordinate security design, role build and remediation, segregation of duties analysis, security testing, cutover readiness, deployment, and post-go-live hypercare. The role will partner with business process owners, Enterprise Applications, IT Security and GRC, Internal Controls, Basis, testing, change management, and implementation partners to deliver secure, scalable, and supportable access solutions. This leader will also establish the knowledge transfer, training, documentation, metrics, and governance model required to transition solutions into sustainable operations and drive ongoing process improvement.

Responsibilities

• Lead the Security workstream for S/4HANA releases, upgrades, and transformation programs. Translate business and technical requirements into a security delivery plan; manage scope, milestones, dependencies, risks, resources, partner performance, and executive-level status reporting.
• Direct future-state SAP security architecture and role design across S/4HANA, Fiori, GRC, and integrated applications. Promote least privilege, scalable role structures, appropriate organizational restrictions, secure privileged access, and alignment with information security and compliance requirements.
• Own role build quality, access remediation, segregation of duties analysis, sensitive-access review, and coordination of mitigating controls. Partner with process owners, IT Security and GRC, Internal Controls, and auditors to resolve design gaps and support timely, sustainable remediation.
• Plan and oversee security unit, integration, user acceptance, and regression testing. Confirm test identities and role assignments reflect the required access model; manage defects through resolution; and provide evidence of readiness for deployment and control assurance.
• Lead security cutover, deployment, and hypercare activities, including production provisioning, transport and access validation, incident triage, escalation, stabilization, and transition to steady-state support. Establish clear readiness criteria, ownership, support coverage, and exit criteria.
• Build a sustainable Security operating and governance model. Deliver knowledge transfer, role-owner and support-team training, procedures, standards, service metrics, backlog governance, periodic role optimization, and continuous improvement for future releases and ongoing operations.

Qualifications

Education / Certifications: Bachelor's degree or higher in Information Technology, Cybersecurity, Computer Science, Business, Accounting, or related field. SAP security, SAP GRC, CISSP, CISM, CRISC, or equivalent certification preferred.

Experience: Minimum of 12-15 years of progressive experience in SAP security, identity and access governance, enterprise applications, or related technology risk disciplines, including experience leading SAP S/4HANA implementations, upgrades, releases, or large-scale transformation programs. Experience managing global teams and third-party delivery partners preferred.

Complexity: Demonstrated expertise and leadership in:

• SAP S/4HANA and Fiori security concepts, role design, authorization objects, user administration, and GRC access controls.
• Least privilege, segregation of duties, sensitive and privileged access, role ownership, access provisioning, and mitigating-control processes.
• Security design, build, remediation, testing, cutover, deployment, hypercare, and transition to steady-state support.
• Regression-test planning, defect governance, root-cause analysis, risk-based decision-making, and production-readiness assessment.
• Governance models, operating procedures, metrics, service management, documentation, training, knowledge transfer, and continuous improvement.
• Cross-functional collaboration with business process owners, Enterprise Applications, Basis, IT Security and GRC, Internal Controls, audit, change management, testing, and implementation partners.
• Clear executive communication, stakeholder influence, issue escalation, vendor management, and delivery in a fast-paced global environment.
• Balancing security, compliance, usability, operational supportability, program timelines, and business continuity.