Kyndryl is seeking a SAP Security Architect to lead the development, implementation, and maintenance of our security strategy for Enterprise SAP environments. In this role, you will design and implement effective security solutions, conduct risk assessments, and maintain security policies and standards.
What You'll Do
- Define and implement security architecture for SAP systems including S/4HANA, ECC, Fiori, BW, and SAP Cloud Platform.
- Design and maintain robust role-based access control (RBAC) models, segregation of duties (SoD), and least-privilege access frameworks.
- Lead SAP security assessments, risk analysis, and compliance reviews for frameworks like SOX, GDPR, and HIPAA.
- Support SAP GRC (Access Control, Process Control, Risk Management) implementation and ongoing management.
- Oversee user provisioning, role design, and privileged access management for SAP environments.
- Collaborate with Identity & Access Management (IAM) and Security Operations Center (SOC) teams for monitoring and incident response.
- Provide security leadership on SAP transformation, upgrades, and cloud migration projects.
- Serve as a subject matter expert and liaison between security, SAP technical teams, and business stakeholders.
- Develop and maintain SAP security standards, guidelines, and procedures.
- Create technical documentation and support internal/external audit requests.
- Conduct security reviews of business applications and solutions to ensure they meet security standards.
- Perform regular security and risk reviews to identify vulnerabilities and recommend remediation activities.
- Advise senior leadership team on the latest security best practices and emerging threats.
What We're Looking For
- Minimum of 10 years of experience in security architecture design and implementation within a Service Provider organization.
- 7+ years of experience in SAP security and architecture, including multiple SAP modules and technologies.
- Deep understanding of SAP authorizations, user provisioning, and security best practices.
- Experience with SAP GRC Access Control and audit reporting tools.
- Familiarity with regulatory compliance frameworks (SOX, GDPR, NIST, ISO 27001).
- Excellent communication and stakeholder engagement skills.
- Experience with security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
Nice to Have
- Bachelor's degree in Information Security, Computer Science, Information Systems, or related field.
- SAP certifications (e.g., SAP Certified Technology Associate - System Security Architect).
- Exposure to SIEM, SOAR, and endpoint detection within SAP landscapes.
- Prior experience in a regulated industry (finance, healthcare, energy).
- Relevant industry certifications such as CISSP, CISM, or CCSP.
- Deep understanding of security technologies, such as firewalls, intrusion detection and prevention systems, vulnerability scanners, and endpoint protection.
- Strong knowledge of cloud security concepts and technologies, such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) with SAP.
Technical Stack
- SAP: S/4HANA, ECC, Fiori, BW, Cloud Platform, GRC (Access Control, Process Control, Risk Management)
- Security Tools: SIEM, SOAR, Endpoint detection
- Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)
Team & Environment
You will collaborate with cross-functional teams, leadership, SAP technical teams, business stakeholders, IAM, and SOC teams.
Benefits & Compensation
- Access to employee learning programs and certifications (Microsoft, Google, Amazon, Skillsoft, and many more).
- Company-wide volunteering and giving platform to donate, start fundraisers, volunteer, and search non-profit organizations.
- Benefits that give you choice and support you and your family.
We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences.
