- Define and enforce SAP security policies, standards, and best practices across modernization projects.
- Lead end‑to‑end SAP authorizations design, testing, and rollout for S/4HANA, ECC, and cloud extensions.
- Conduct security risk assessments, gap analyses, and remediation planning for SAP landscapes.
- Collaborate with functional and technical teams to embed security controls into solution designs.
- Mentor and coach junior security consultants, fostering knowledge transfer and skill development.
- Manage stakeholder communication, presenting security findings and recommendations to senior leadership.
- Oversee compliance audits (GRC, SOX, GDPR) and ensure timely remediation of findings.
- Drive continuous improvement initiatives, leveraging automation and emerging security tools.
- Support incident response and forensic investigations for SAP security events.
- Stay current with SAP security updates, patches, and industry trends to advise the delivery organization.
- 10+ years of hands‑on experience in SAP Security, including authorizations, GRC, and compliance.
- Proven track record as a subject‑matter expert on SAP security implementations and modernizations.
- Deep knowledge of SAP S/4HANA, ECC, SAP Cloud Platform, and related security frameworks.
- Experience leading security design and delivery for large‑scale SAP transformation projects.
- Strong understanding of SAP GRC modules, role‑based access control, and segregation of duties.
- Excellent communication and stakeholder management skills, with ability to influence senior leadership.
- Relevant certifications (e.g., SAP Certified Technology Associate – Security, CISA, CISSP) preferred.
- Demonstrated ability to mentor teams and drive knowledge‑sharing initiatives.
- Analytical mindset with strong problem‑solving capabilities in complex SAP environments.
- Bachelor’s degree in Computer Science, Information Security, or related field; Master’s degree is a plus.
ABOUT US:
Bristlecone is the leading provider of AI-powered application transformation services for the connected supply chain. We empower our customers with speed, visibility, automation, and resiliency – to thrive on change.
Our transformative solutions in Digital Logistics, Cognitive Manufacturing, Autonomous Planning, Smart Procurement and Digitalization are positioned around key industry pillars and delivered through a comprehensive portfolio of services spanning digital strategy, design and build, and implementation across a range of technology platforms.
Bristlecone is ranked among the top ten leaders in supply chain services by Gartner. We are headquartered in San Jose, California, with locations across North America, Europe and Asia, and over 2,500 consultants. Bristlecone is part of the $19.4 billion Mahindra Group.
EQUAL OPPORTUNITY EMPLOYER:
Bristlecone is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.
INFORMATION SECURITY RESPONSIBILITIES:
- Understand and adhere to Information Security policies, guidelines and procedure, practice them for protection of organizational data and Information System.
- Take part in information security training and act while handling information.
- Report all suspected security and policy breach to InfoSec team or appropriate authority (CISO).
- Understand and adhere to the additional information security responsibilities as part of the assigned job role.
Skills Required
- 10+ years of hands-on SAP Security experience, including authorizations, GRC, and compliance
- Subject-matter expertise in SAP security implementations and modernization projects
- Deep knowledge of SAP S/4HANA, ECC, SAP Cloud Platform, and related security frameworks
- Experience leading security design and delivery for large-scale SAP transformation projects
- Strong understanding of SAP GRC modules, role-based access control, and segregation of duties
- Excellent communication and stakeholder management skills, including influencing senior leadership
- Relevant certification such as SAP Certified Technology Associate Security, CISA, or CISSP
- Ability to mentor teams and drive knowledge-sharing initiatives
- Analytical mindset and strong problem-solving capabilities in complex SAP environments
- Bachelor's degree in Computer Science, Information Security, or a related field
- Master's degree
Bristlecone Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Bristlecone and has not been reviewed or approved by Bristlecone.
-
Healthcare Strength — Health coverage is described as having improved recently, with core medical, dental, and vision coverage in place for U.S. employees. Health insurance is also characterized positively in several places.
-
Leave & Time Off Breadth — PTO, paid holidays, and WFH flexibility are outlined for U.S. employees, with PTO specifically called out positively. Employer-verified details indicate unlimited PTO for some exempt roles.
-
Wellbeing & Lifestyle Benefits — An employee assistance program (unMute) provides confidential counseling alongside wellness apps and webinars. Additional wellbeing initiatives and company celebrations reinforce lifestyle support.
Bristlecone Insights
What We Do
Bristlecone is the industry’s largest pure-play supply chain service provider. As the trusted partner for AI-first supply chain transformations, we specialize in empowering customers with tech-enabled solutions for planning, sourcing, and fulfillment. Through our consulting, platforms, and supply chain build and enablement expertise, we help Global 2000 organizations in the life sciences, retail, consumer goods, manufacturing, and high-tech industries drive visibility, resiliency, and efficiency across their supply chain. Guided by a consulting-led approach, we serve as strategic partners to customers throughout their supply chain transformation journey. With comprehensive advisory and implementation capabilities, we offer high-value consulting spanning domains, processes, and change management, ensuring tailored solutions that drive meaningful outcomes for each customer. Bristlecone is headquartered in San Jose, California, with locations across North America, Europe, and Asia. It is part of the Mahindra Group. Learn more at www.bristlecone.com







