You will join a large enterprise undergoing a multi-year SAP transformation, where legacy on-prem SAP landscapes are gradually being replaced by S/4HANA PCE and multiple SAP SaaS satellite solutions. Information security is a critical pillar of this transformation, driven centrally by the CISO organisation and closely aligned with regulatory obligations such as GDPR and NIS2.

This role strengthens the CISO capability within the ERP organisation, ensuring that security, risk management, compliance, and governance are embedded pragmatically across SAP projects and operations.

Role Description

• As Senior SAP Information Security & Risk Lead, you translate the central CISO strategy into practical, implementable security solutions within a large SAP transformation program.
• You act as the primary CISO point of contact for SAP-related initiatives, supporting both transformation projects and existing SAP environments.
• You maintain and evolve the Information Security Management System (ISMS) for SAP solutions, aligned with international standards and regulatory requirements.
• You perform and coordinate information risk analyses, define mitigation actions, and ensure consistent follow-up across SAP projects and operations.
• You support ERP delivery teams by embedding security and risk management processes into SAP-supported business and IT processes.
• You manage and maintain the SAP-related section of the central information risk register and ensure risks and mitigations are clearly reported to business owners.
• You define requirements for cybersecurity tools and services within the SAP landscape and validate their implementation with internal teams and external partners.
• You collaborate with SAP Basis, Identity & Access Management, and CISO CSIRT teams on security operations and incident response.
• You support IT audits and compliance activities, facilitate audit findings, and follow up on remediation actions in close cooperation with Internal Audit and the DPO.
• You contribute to security governance, policies, standards, and awareness initiatives across the ERP organisation.
• You prepare and deliver structured reporting on security risks, compliance, progress, and findings to senior management and steering bodies.