This is an IC role, responsible for handling SAP security architecture, governance, compliance, and risk management across Microsoft's SAP ecosystem, including S/4HANA, SAP cloud solutions, and integrated services. The candidate brings deep expertise in SAP Security, GRC, SoD, regulatory compliance (SOX, GDPR, DORA), and cloud security, while partnering across engineering, business, privacy, and audit teams to deliver secure, scalable, and audit-ready solutions. leadership, stakeholder management, and experience securing emerging technologies such as AI agents, copilots, SAP BTP, and Azure-integrated environments are key to success.
Responsibilities
Handle SAP security architecture and design to protect data and systems from unauthorized access and ensure compliance with Microsoft standards and applicable regulatory requirements.
Define, implement, monitor, and enforce security requirements, controls, and authorization designs across SAP platforms and integrated services.
Develop scalable SAP roles and authorizations aligned with least-privilege principles, industry best practices, and Microsoft policies.
Stay current with emerging SAP security threats, security technologies, and industry practices relevant to Microsoft’s technology roadmap.
Partner with engineering, business, compliance, and operations teams to communicate security requirements and provide recommendations for SAP integration points.
Proactively identify changes in the SAP threat landscape and lead timely risk assessment and remediation activities.
Ensure project teams incorporate and document security, privacy, and compliance requirements throughout Microsoft’s development lifecycle, including ITLC.
Create and maintain complete, consistent, and audit-ready SAP security architecture, administration procedures, standards, and guidelines.
Lead security workstreams through design, development, testing, deployment, and operational readiness while meeting project scope, quality, and schedule commitments.
Estimate security work, define milestones and deliverables, manage dependencies, and communicate risks and progress to stakeholders.
Support the annual security and privacy program by developing and maintaining security standards and procedures for SAP and connected systems.
Resolve complex and escalated security issues through structured investigation, stakeholder coordination, and sustainable corrective actions.
Provide technical thought leadership, coaching, and guidance to team members, engineering partners, and management.
Qualifications
5+ years of experience in SAP security across technologies such as SAP NetWeaver, S/4HANA, SAP HCM, MDG, BIS, and cloud services including SAP BTP, SuccessFactors, Ariba, or IBP, with deep knowledge of SAP authorization concepts.
3+ years of experience with SAP Governance, Risk, and Compliance tools and capabilities.
3+ years of experience implementing security controls for regulatory and privacy requirements such as SOX, protection of personally identifiable information, GDPR, DORA, and international access restrictions.
3+ years of experience managing Segregation of Duties risks, business-process conflicts, and mitigating controls.
Strong knowledge of information-security baselines, risk-management frameworks, and security standards.
Working knowledge of security concepts for servers, networks, cloud platforms, logging, and monitoring.
Understanding of at least one major business-process domain, such as Finance, Human Resources, or Supply Chain Management.
Bachelor’s degree in Business, Computer Science, Management Information Systems, or a related field, or equivalent practical experience.
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- 5+ years experience in SAP security across SAP NetWeaver, S/4HANA, SAP HCM, MDG, BIS, and cloud services (SAP BTP, SuccessFactors, Ariba, IBP)
- 3+ years experience with SAP Governance, Risk, and Compliance (GRC) tools and capabilities
- 3+ years implementing security controls for regulatory and privacy requirements (SOX, GDPR, DORA, PII protection)
- 3+ years managing Segregation of Duties (SoD) risks, business-process conflicts, and mitigating controls
- Strong knowledge of information-security baselines, risk-management frameworks, and security standards
- Working knowledge of security concepts for servers, networks, cloud platforms, logging, and monitoring
- Understanding of at least one major business-process domain (Finance, Human Resources, or Supply Chain Management)
- Bachelor's degree in Business, Computer Science, MIS, or related field, or equivalent practical experience
- Experience securing emerging technologies (AI agents, copilots) and Azure-integrated SAP environments; stakeholder management and technical leadership
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Fair & Transparent Compensation — Pay is presented as broadly competitive overall, with clear role/level/location variation and an emphasis on using posted ranges and band information for apples-to-apples comparisons.
-
Retirement Support — Retirement benefits are described as a standout, highlighted by a strong 401(k) match structure and immediate vesting, plus additional plan features for tax-advantaged saving.
-
Parental & Family Support — Family-oriented benefits are portrayed as a meaningful strength, with substantial paid parental leave and added supports like back-up care and adoption/surrogacy assistance.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
