N2F is hiring a Sr. Product Manager

Vilgain is hiring a Sr. Product Manager responsible for strategic and operational user security tasks, focusing on SAP user management and security architecture. You will design, develop, and maintain the company’s SAP security framework across multiple environments.

What You'll Do

• Design, develop, and maintain the company’s SAP user management and security architecture across multiple SAP environments.
• Analyze and understand current Roles and Access Restrictions from an Audit standpoint and synchronize with existing GRC access management solution.
• Maintain, manage, and monitor compliance with the SAP IT Security framework.
• Track Internal Security Control (ISC) gaps and exceptions for the global IT control environment.
• Commit to upholding government and corporate security guidelines, including Segregation of Duties (SoD), Sarbanes-Oxley (SOX) and Privacy related standards.
• Assist the Lead in developing and Implementing SAP security policies, processes, architecture, training, and communications.
• Identify security solutions, implementing standards and best practices, proactively identifying and remediating vulnerabilities.
• Work with solution architects and business process owners to translate business requirements into SAP Security design and maintain SAP Security Roles.
• Assist in periodic control activities such as regular review of user access on monthly super user review, monthly and quarterly critical role review and quarterly user account review.
• Monitor and maintain IT user accounts, roles, and SAP licensing.
• Ensure SAP security architecture is in line with company policies and procedures.
• Facilitate internal and external audits as requested.
• Develop and deliver documentation and training as needed.
• Review, assess, and implement quarterly SAP Security Notes and patches released by SAP.
• Perform troubleshooting and root-cause analysis for complex authorization and access issues using SU53, SUIM, and system traces; collaborate with ABAP developers.
• Conduct SAP License Auditing and ensure user classification accuracy.
• Coordinate periodic access review cycles, report results to control owners, and support remediation of identified gaps.
• Partner with audit and compliance teams to respond to internal and external audit requests, supporting SOX, GDPR, and privacy requirements.
• Participate in design of role-based and position-based security models ensuring least-privilege access.
• Evaluate and recommend emerging SAP Security and GRC technologies.
• Configure and support Security Weaver, Pathlock (Unify), or equivalent GRC tools for new business unit integrations and compliance automation.
• Collaborate closely with functional, technical, and audit teams to define, test, and validate access controls during system implementations and upgrades.

What We're Looking For

• Bachelor’s degree in Computer Science, Computer Information Systems or a related field (or foreign degree equivalent).
• Eight (8) years of experience in the job offered, as a GRC and/or SAP Security professional, or in a related occupation.
• SAP Application Security Expertise: Experience across SAP ECC, S/4HANA, Security Weaver (Pathlock), GRC Access Control, and GRC Process Control, including user and role administration, monitoring, and auditing.
• Operating System & Database Security: Experience with Windows, Linux, and HANA database security principles, including hardening, encryption, and privileged access management.
• SAP HANA Database Security: Hands-on experience with HANA user and role management, analytic privileges, catalog roles, XS Advanced security, and audit policy configuration.
• SAP Licensing & Compliance: Experience with SAP user licensing models (Professional, Limited Professional, ESS, etc.), indirect access evaluation, and compliance reporting.
• SAP GRC Access Control: Experience with Access Risk Analysis (ARA), Emergency Access Management (EAM/Firefighter), Access Request Management (ARM), and Business Role Management (BRM), including rule set customization.
• SAP Process Control: Experience with implementation and maintenance of automated and manual controls, workflow configuration, control testing, and continuous monitoring aligned with compliance frameworks (SOX, ISO etc).
• Onapsis Platform: Hands-on experience with Onapsis for SAP vulnerability scanning, configuration assessment, transport analysis, and integration with SIEM tools.
• SOX & Audit Readiness: Experience with SOX compliance across OS, database, and SAP application layers, including logging, change control, and segregation of duties controls.
• Security Monitoring & Integration: Experience with security monitoring, logging, and forensic analysis, leveraging tools like SAP Security Audit Log, STAD, SM20.
• SAP Security Certification.
• Position requires up to 15% domestic travel.

Technical Stack

• SAP ERP, SAP BW, SAP PI, Fiori, Gateway, SAP S/4, SAP GRC, Access Violation Management, Regulation Management, SAP SRM, SAP HANA, SecurePro, Emergency Request, Separation Enforcer
• Security Weaver, Pathlock (Unify), Onapsis Platform
• Windows, Linux, HANA Database

Team & Environment

Assist the Lead in developing and Implementing SAP security policies.

Benefits & Compensation

• Compensation: USD 172,827 - USD 185,000 per year
• Medical, dental and vision insurance
• 401(k)
• Paid leave
• Tuition reimbursement
• A variety of other discounts and perks

Work Mode

This is a global role.

Vilgain champions an inclusive culture and strives to attract and develop a talented workforce. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.