Senior Product Manager, SAP GRC

Job Description

The Senior Product Manager, SAP GRC is an integral part of the Corp Core Innovation & Operations organization, reporting directly to the Director, GRC. This role leads the strategy and execution of complex SAP security and access-governance initiatives across NBCU, using advanced functional and technical expertise to evaluate multiple variables, resolve complex problems, and enhance methods, systems, and tools. The Senior Product Manager serves as a subject matter expert for SAP GRC and security, provides technical guidance and oversight, drives architecture and design decisions, and ensures successful delivery of high-impact initiatives. The role also mentors and coaches associates, advises stakeholders on complex matters, adapts communication to influence audiences across the broader business, and may be accountable through the team for delivery of tactical business targets.

Responsibilities:

• Lead the implementation, configuration, and continuous improvement of SAP GRC Access Control (AC) and Identity and Access Governance (IAG) modules, ensuring successful execution across complex, interdependent workstreams.
• Experience with SAP Business Technology Platform (BTP) security concepts, including identity authentication, authorization, role collections, destination security, and integration with enterprise identity providers.
• Working knowledge of SAP Joule and AI-enabled SAP solutions, with an understanding of security, access governance, data privacy, and responsible AI considerations in SAP environments.
• Ability to support security design for SAP BTP extensions, Fiori applications, cloud integrations, and AI-driven business processes across SAP S/4HANA and connected systems.
• Familiarity with securing and governing emerging SAP capabilities such as Joule, generative AI, workflow automation, and cloud application services within SAP’s security and compliance framework.
• Lead collaboration with architecture, application, engineering, business, and compliance teams to evaluate and implement secure access models for SAP BTP, AI services, and intelligent automation solutions; provide technical guidance and drive architecture and design decisions.
• Design and implement role-based access controls (RBAC), firefighting, and segregation of duties (SoD) rules to ensure compliance with regulatory standards and company policies.
• Build and maintain a network of key contacts across and beyond the immediate area of expertise; influence senior stakeholders, adapt communication style, and use persuasion to translate business needs into scalable technical specifications and delivery priorities.
• Recommend new SAP GRC features and functionality, security technologies, tools, and practices to improve the organization's risk and compliance posture.
• Own and evolve SAP GRC strategies, policies, roadmaps, standards, and procedures; break down complex problems and identify opportunities to enhance methods, systems, and tools.
• Serve as the SAP GRC and security subject matter expert, applying deep domain specialization to frequently advise product, engineering, architecture, audit, compliance, and business teams on complex matters.
• Lead complex projects with multiple variables and dependencies, establish clear delivery outcomes, provide technical oversight, proactively manage risks, and remain accountable through the team for achievement of tactical business targets.
• Mentor and coach product, security, and technical associates, strengthening domain capability, technical judgment, and consistent application of SAP security and governance standards.
• Exercise independent judgment on product, architecture, control, and delivery decisions that can affect the broader area of contribution, balancing business value, technical feasibility, compliance, and risk.
• Ensure compliance with regulatory requirements (e.g., SOX, GDPR) and industry standards.
• Exposure to other GRC products like SAP IAG, SAP BIS, SAP Audit Management, and Process Controls.
• Develop and maintain GRC workflows, including access request, approval, and review processes.
• SAP GRC integration with SAP Analytics Cloud, Success Factors, SAP BTP, SAP HANA, Fieldglass, AD, etc.
• Conduct detailed assessments of existing access controls and authorization processes to identify gaps and risks.
• Designs, develops and maintains the company’s SAP user management and security architecture across multiple SAP environments in addition to providing solution recommendations
• Analyze & understand the current Roles and Access Restrictions from Audit standpoint and synchronize with existing GRC access management solution to provide a risk-free environment
• Maintaining, managing and monitoring compliance with the SAP IT Security framework; tracking Internal Security Control (ISC) gaps and exceptions for the global IT control environment
• Commitment to upholding government and corporate security guidelines including Segregation of Duties (SoD), Sarbanes-Oxley (SOX) and Privacy related standards
• Assist with the development and implementation of SAP security policies, processes, architecture, training, and communications.
• Identify security solutions, implement standards and best practices, proactively identify and remediate vulnerabilities
• Responsible for managing Security for SAP ERP, SAP BW, Fiori, Gateway, SAP S/4, SAP HANA Implementation in accordance with SAP Security Strategy and Administration/Troubleshooting the complex SAP Security Issues
• In partnership with solution architects and the business process owners , translate business requirements into the SAP Security design and maintenance of the SAP Security Roles in SAP Systems

Qualifications

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• 10+ years of experience in SAP Security, SAP GRC, Identity and Access Management, or related SAP security disciplines.
• Strong knowledge of the SAP Authorization Concept, including roles, profiles, authorization objects, user administration, and troubleshooting authorization issues.
• Hands-on experience designing, building, and maintaining SAP security roles and authorizations across SAP S/4HANA, MDG, BW4HANA, SAC, CIS/BTP environments.
• Strong working knowledge of SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter), and MSMP workflows.
• Experience performing Segregation of Duties (SoD) analysis, security risk assessment, remediation, and mitigation.
• Experience supporting SAP security implementations, upgrades, migrations, and production environments.
• Knowledge of application security concepts across ABAP, SAP HANA, Fiori, and related SAP technologies.
• Strong analytical, problem-solving, and troubleshooting skills with the ability to resolve complex SAP security and authorization issues.
• Strong written and verbal communication skills with the ability to work effectively with business, functional, technical, audit, and compliance teams.
• Ability to manage multiple assignments and priorities in a complex enterprise environment.
• Self-motivated with the ability to learn quickly and adapt to changing technologies and business priorities.

Desired Characteristics:

• 12+ years of experience as an SAP Security and/or SAP GRC professional, preferably in large, complex enterprise environments.
• Demonstrated leadership of at least two full lifecycle SAP implementations, including architecture and design decisions, cross-functional delivery, risk management, and stakeholder alignment.
• Preferred experience with 3 to 5 full lifecycle SAP Security/GRC implementations, particularly across SAP S/4HANA, and SAP GRC Access Control/Process Control 12.x.

…