SAP 安全专员 - 远程(25% 出差)(印第安纳州卡梅尔,美国,46032)
SAP Security Specialist - Remote (25% travel) (Carmel, IN, US, 46032)
创新始于你
在Belden,创新创造可能性——对我们的员工、客户以及我们服务的社区而言。我们连接人、信息和想法,解决世界上最复杂的连接挑战,将好奇心转化为有意义的影响。在这里,你将从事挑战你的工作,支持你的成长,并赋予你塑造未来的能力。你将与全球团队合作,获得多元视角,并为超越我们业务的解决方案做出贡献——在我们周围的世界创造价值。
我们共同塑造数字化的未来,并为下一代创新铺平道路。
职位简介
我们正在寻找一位高级SAP安全专家,作为我们S/4HANA迁移项目中授权和访问治理的全球设计权威和技术负责人。这个高级个人贡献者角色负责制定全球安全标准,推动端到端的设计决策,并对承包商及离岸/在岸合作伙伴交付的工作进行监督、审查和最终批准。理想的候选人至少领导过一个完整生命周期的SAP安全设计,并能够在全球项目中担任安全架构决策的最终技术权威。
主要职责
设计领导与全球标准
- 推动整体S/4HANA授权和安全设计策略,对角色结构、SoD规则集设计和Fiori安全模型做出最终架构决策
- 制定、文档化并负责全球安全标准、设计原则和命名规范,确保跨地区、业务单元和未来部署的一致性
- 在项目生命周期内进行质量保障检查点,确保承包商的工作符合全球设计标准和合规要求
- 建立可扩展至当前和未来实施的可重用设计模板和治理框架
- 作为复杂安全设计问题的升级点和最终决策者
承包商工作的监督、审查与批准
- 对承包商/SI与角色设计和SoD补救相关的交付物提供技术监督
- 在角色构建、目录/瓷砖分配和SoD规则集变更被推广到测试/生产环境之前进行审查和正式批准
- 要求承包商遵守SLA、文档标准和设计规范
- 提供指导
查看英文原文
Innovation Starts With You
Propel your career at Belden, where innovation creates possibilities—for our people, our customers, and the communities we serve. We connect people, information, and ideas to solve the world’s most complex connectivity challenges, turning curiosity into meaningful impact. Here, you’ll take on work that challenges you, supports your growth, and empowers you to shape what’s next. You’ll collaborate with global teams, gain diverse perspectives, and contribute to solutions that extend beyond our business—creating value in the world around us.
Together, we are shaping the future of digitization and paving the way for the next generation of innovation.
About the Role
We are seeking a Senior SAP Security Specialist to serve as the global design authority and technical lead for authorization and access governance across our S/4HANA migration program. This senior individual contributor role is responsible for setting global security standards, driving end-to-end design decisions, and providing oversight, review, and final approval of work delivered by contractors and offshore/onshore partners. The ideal candidate has led security design on at least one full-lifecycle SAP implementation and is comfortable operating as the final technical authority on security architecture decisions across a global program.
Key Responsibilities
Design Leadership & Global Standards
- Drive the overall S/4HANA authorization and security design strategy, making final architectural decisions on role structure, SoD ruleset design, and Fiori security models
- Define, document, and own global security standards, design principles, and naming conventions for consistency across regions, business units, and future rollouts
- Conduct quality assurance checkpoints throughout the project lifecycle to ensure contractor work aligns with global design standards and compliance requirements
- Establish reusable design templates and governance frameworks scalable across current and future implementations
- Serve as escalation point and final decision-maker for complex security design questions
Oversight, Review & Approval of Contractor Work
- Provide technical oversight of contractor/SI deliverables related to role design and SoD remediation
- Review and formally approve role builds, catalog/tile assignments, and SoD ruleset changes before promotion to test/production
- Hold contractors accountable to SLAs, documentation standards, and design specifications
- Mentor contractor teams to preserve design intent and enable knowledge transfer
S/4HANA Migration Execution
- Lead the security workstream across Design & Build, Test Cycles, Go Live, and Hypercare phases
- Lead SoD ruleset development, and risk remediation
- Direct Fiori launchpad security design and front-end/back-end authorization alignment
- Lead cutover security activities and hypercare issue resolution
Stakeholder & Program Engagement
- Act as primary security advisor to program and IT leadership on design risk and compliance exposure
- Represent security workstream in project meetings
- Partner with global functional and technical leads (OTC, FTM, FUL, GTS, SCP, PP, EWM, MFG) to ensure security design supports redesigned business processes
Required Qualifications
- 10+ years of SAP security administration experience, including full-cycle leadership of at least one SAP implementation
- Bachelor’s degree in computer science, Information Systems, or related field.
- Experience setting global security design standards across a multi-region SAP landscape
- Proven experience reviewing, quality-checking, and approving deliverables produced by external contractors or SI partners
- Expert-level knowledge of SAP authorization concepts: PFCG, SU24, SU25, SUIM, SU53, role derivation, composite/master role structures
- Experience supporting SAP system upgrades from a security perspective, including pre/post-upgrade authorization testing and remediation
- Demonstrated ability to build and govern SoD rulesets and drive large-scale risk remediation
- Strong hands-on experience with Security Access Control process
- Solid understanding of SOX/ITGC compliance requirements
- Experience running USMM (SAP System Measurement) for license audits, including reconciling user classifications and measurement results to support license compliance reporting
- Experience managing or directing the work of both employees and external vendors/contractors on a technical deliverable
- Strong executive communication skills; able to present design decisions and risk trade-offs to senior stakeholders
- Ability to set direction and own outcomes — comfortable as the final technical authority on design decisions
- Strong quality-control mindset; holds self and contractors to a high bar
- Strategic and standards-oriented, balancing global consistency with local/regional needs
- Effective at influencing without direct authority, particularly with external partners
- Excellent written and verbal communication for both technical and executive audiences
- Approximately up to 25% of travel may be required
- Preferred Qualifications
- SAP Security or GRC certification
- Experience with SAP Cloud Identity Access Governance (IAG) or SAP BTP security
- Experience building a global governance model for SAP security
- Familiarity with vendor management, SOW/deliverable review processes, and contractor performance management
- Experience with managing SAP Full Use Equivalent licensing metrics, ensuring user classifications and authorization assignments align with license compliance requirements and support cost optimization
- Experience with ControlPanel GRC
Applicants can expect a base compensation range of $101,400 - $152,100 plus benefits and additional incentives based on the level of the role. This is the reasonable estimate that Belden believes it might pay for this job based on applicable circumstances at the time of posting. Belden may ultimately pay more or less than the posted range as permitted by law, and commensurate with the applicant’s experience, qualifications, and geographical location.
Belden also offers hybrid and remote work practices where feasible and provides employees with benefits that could include health/dental/vision, long term/short term disability, life insurance, HSA/FSA, matching retirement plans, paid vacation, parental leave, employee stock purchase plan, paid leave for volunteer work in your community, training opportunities, professional talent management and succession planning, corporate health well-being initiatives and a work culture which includes commitment to diversity, equity, inclusion and sustainability!
Let’s Create Possibilities Together.
Join a global community shaping the future of intelligent connectivity. At Belden, you’ll help push the boundaries of technology and write the next chapter of innovation, creating possibilities for your career, your future, and the world around you.
These statements are intended to describe the general nature and level of work involved for this job. It is not an exhaustive list of all responsibilities, duties and skills required of this job.
Originally posted on Himalayas