SAP Security Specialist

Company: Amrize
Location: Park Ridge
Posted on: February 28, 2026

Job Description:

Job Description We're seeking a SAP Security Specialist who's ready to put your skills to work on projects that matter - and build a career with a company that's building North America. Job Title: SAP Security Specialist | Req ID: 15470 | Location: Chicago Office IL, Building Envelope - Corp Nashville, TN ABOUT THE ROLE Design, architect, and maintain a world-class SAP security ecosystem encompassing sophisticated role-based access controls, GRC (Governance, Risk, and Compliance) frameworks, and advanced security protocols to safeguard enterprise systems and ensure strict adherence to regulatory compliance standards. As a strategic security partner, you will implement industry-leading best practices, conduct proactive risk assessments, and drive continuous improvement initiatives that fortify system integrity, prevent unauthorized access, and ensure seamless operational continuity across the organization's SAP landscape. WHAT YOU'LL ACCOMPLISH \n Orchestrate SAP Change Management: Lead and manage complex changes across the SAP ecosystem, ensuring secure, controlled implementations in production environments while maintaining zero-tolerance for security vulnerabilities. \n Role Engineering & Optimization: Design, architect, and continuously refine SAP security roles and authorization profiles, ensuring alignment with evolving business requirements, organizational structure, and least-privilege access principles. \n Segregation of Duties (SoD) Management: Conduct comprehensive risk analysis and simulations using GRC tools at technical role, position, and user levels to identify, remediate, and prevent critical SoD conflicts and sensitive access violations. \n Service Delivery Excellence: Monitor and resolve SAP Security tickets and incidents through ServiceNow, ensuring exceptional service delivery while consistently meeting or exceeding established SLAs. \n Advanced Troubleshooting: Analyze and diagnose complex permission-related errors within SAP systems, utilizing deep technical expertise to classify, resolve, or appropriately escalate issues to ensure rapid resolution. \n Audit Log Analysis & Forensics: Perform detailed analysis of SAP audit logs and security events to support investigations, respond to security incidents, and fulfill compliance and regulatory requirements. \n GRC Administration & Enhancement: Maintain and optimize GRC systems, including regular updates to rulesets, risk matrices, and compliance frameworks to ensure real-time risk visibility and regulatory alignment. \n Audit & Compliance Management: Serve as the primary point of contact for internal and external audits, ensuring full compliance with SOX, GDPR, HIPAA, or other applicable regulations through meticulous documentation and control implementation. \n Critical Access Controls: Enforce stringent controls on critical SAP objects, transactions, and administrative functions, implementing security guardrails that align with organizational risk tolerance and industry best practices. \n Security Transformation Projects: Drive and deliver strategic security projects, collaborating cross-functionally to implement innovative solutions that enhance the organization's security posture. \n Process Automation & Optimization: Identify opportunities for security process improvements, designing and implementing automation solutions that reduce manual effort, minimize errors, and accelerate response times. \n Continuous Improvement: Proactively recommend, prototype, and deploy enhancements to the security model that leverage emerging technologies, industry trends, and lessons learned from security assessments. \n Additional Strategic Initiatives: Execute special projects and additional responsibilities as assigned by leadership to support organizational objectives. \n Demonstrate a commitment to communicating, improving and adhering to health, safety and environmental policies in all work environments and areas. Promote a culture of safety and exhibit these behaviors. \n \n RESPONSIBILITIES & TASKS \n Other responsibilities as assigned \n \n WHAT WE'RE LOOKING FOR Education: Bachelor's degree Additional Education Preferred: Master's degree Field of Study Preferred: Computer science, engineering, and IT-related sciences Required Work Experience: \n • Minimum 5 years of hands-on experience in SAP Security administration and architecture \n • Proven track record in enterprise-scale SAP environments (ECC, S/4HANA) \n • Demonstrated expertise in GRC implementations and security compliance frameworks Required Training/Certifications: \n • SAP Certified Technology Associate - System Security Architect \n • SAP GRC Access Control certification \n • CISSP, CISM, or equivalent information security certification \n • ITIL Foundation or higher Required Technical Skills : \n • SAP Security: Expert-level knowledge of SAP authorization concepts, role design, profile generation, and user administration \n • GRC Solutions: Advanced proficiency in SAP GRC Access Control, including risk analysis, access request management, and ruleset configuration \n • Compliance Frameworks: Working knowledge of SOX, GDPR, ISO 27001, or similar regulatory standards \n • ServiceNow or ITSM platforms: Experience managing incidents and change requests Additional Requirements : \n \n Successful candidates must adhere to all safety protocols and proper use of Amrize approved Personal Protection Equipment ("PPE"), including but not limited to respirators. Subject to applicable law, employees that are required to wear respirators must be clean shaven where the respirator seal meets the face in order to pass the qualitative and quantitative fit tests. \n Amrize is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. \n We thank all applicants for their interest; however, only those selected for an interview will be contacted. BUILDING INCLUSIVE WORKSPACES At Amrize, there is endless opportunity for you to play your part. Whether you're in a technical, managerial, or frontline role, you can shape a career that works for you. We're seeking builders, creative thinkers and innovators. Come put your expertise to work while developing the knowledge and skills to drive your career forward. With us you'll have the chance to build your ambition! Amrize North America Inc. takes pride in our hiring processes and our commitment that all qualified applicants will receive consideration for employment without regard to age, race, color, ethnicity, religion, creed, national origin, ancestry, gender, gender identity, gender expression, sex, sexual orientation, marital status, pregnancy, parental status, genetic information, citizenship, physical or mental disability, past, current, or prospective service in the uniformed services, or any other characteristic protected by applicable federal, state or local law. Amrize North America Inc, and its respective subsidiaries are Equal Opportunity Employers, deciding all employment on the basis of qualification, merit and business need. Amrize Canada Inc. is committed to the principles of employment equity and encourages the applications from women, visible minorities, and persons with disabilities. In compliance with the ADA Amendments Act (ADAAA), if you have a disability and would like to request accommodation in order to apply for a position with us, please email recruiting- accommodations@amrize.com. This email address should only be used for accommodations and not general inquiries or resume submittals. In Ontario, our organization/business is committed to fulfilling our requirements under the Accessibility for Ontarians with Disabilities Act. Under the Act, accommodations are available on request for candidates taking part in all aspects of the selection process. While we sincerely appreciate all applications, only candidates selected for an interview will be contacted.

Keywords: Amrize, Lombard , SAP Security Specialist, IT / Software / Systems , Park Ridge, Illinois