SAP Access Controls / Project Lead - Remote

Job Description

Position: SAP Access Controls / Project Lead

Location: Remote

Role Summary:

Lead the day-to-day engagement while bridging business controls, SAP access governance and technology selection. This is a hands-on controls and consulting role, not a traditional PM-only position. The consultant will drive requirements and decisions, facilitate SoD/control workshops, coordinate IAG and alternative-tool evaluation, translate technical findings into business-control implications, and design the operating process that remains viable whether the client selects a platform or continues with a structured manual approach.

Key Responsibilities:

\n
• Manage the integrated workplan, milestones, risks, dependencies, decisions, actions and client coordination.
\n
• Lead discovery, business/control requirements, SoD validation, technology-evaluation, findings and pilot-validation workshops.
\n
• Confirm stakeholders, decision rights, priority processes, user/role populations and pilot boundaries.
\n
• Document requirements for access transparency, SoD monitoring, provisioning, certification, remediation/mitigation, evidence retention and audit support.
\n
• Partner with the SAP Access Governance / IAG Lead to define technology evaluation criteria and coordinate IAG, Pathlock, Xiting or other relevant platform demonstrations and assessments.
\n
• Facilitate business/control validation of the SoD ruleset, sensitive-access model and technical findings.
\n
• Translate access-analysis findings into business risk, control implications, remediation priorities and management decisions.
\n
• Design the recurring operating model for access review, SoD monitoring, exception management, ownership, evidence retention and audit support.
\n
• Develop procedures and work instructions for both the selected technology-enabled process and, if needed, a sustainable manual/rules-based review process using SAP extracts and reporting.
\n
• Maintain the remediation/mitigation register, executive status reporting, decision materials, final readout and implementation/operating roadmap.
\n
• Actively manage scope and dependencies to keep the initial assessment, technology decision and pilot focused on agreed priority populations and use cases.
\n

Required Qualifications:

\n
• Strong consulting or project/program leadership experience in SAP access controls, security, governance, risk, audit or related transformation work.
\n
• Strong working knowledge of SAP SoD, sensitive access, role-based access, provisioning, certification, mitigating controls and audit evidence.
\n
• Experience designing and operating access-review/SoD processes, including manual or reporting-based control processes where a dedicated governance tool is not used.
\n
• Ability to facilitate effectively across Finance, Internal Controls/Audit, SAP IT/Security, business process owners and technology vendors.
\n
• Strong requirements, process-design, governance, RACI, documentation, executive-communication and stakeholder-management skills.
\n
• Ability to translate technical SAP security findings into clear business-control implications and decisions.
\n
• Demonstrated success managing time-boxed assessments, technology selections or pilots with multiple dependencies.
\n

Preferred Qualifications:

\n
• Experience with SAP Cloud IAG access-governance projects is strongly preferred.
\n
• Experience with Pathlock and/or Xiting evaluations, implementations or operating models is highly preferred.
\n
• Automotive industry experience, particularly in a large or complex automotive organization, is highly preferred.
\n
• Big Four, major consulting firm or comparable client-service experience in SAP access/security transformation is preferred.
\n