SAP Security & GRC Lead

Job ID: 529787

CRH Americas Building Products is reinventing what's possible in building solutions.

We are the leading provider of innovative outdoor living products and utility infrastructure solutions for the water, energy, and communications markets throughout North America.

We're a trusted and strategic partner to engineers, contractors, distributors, specifiers, retailers and homeowners alike as the manufacturer of precast concrete, polymer concrete, and plastic infrastructure products.

Our portfolio of brands includes Oldcastle APG, Oldcastle Infrastructure, Belgard® hardscape, Echelon® Masonry, RDI® railing, Catalyst™ Fence Solutions, Sakrete® packaged concrete, Amerimix® mortar, Pebble Technology International® pool finishes, and Techniseal® sands and sealant technologies.

Job Summary

Oldcastle Infrastructure Inc.

(OII) is seeking an SAP Security & GRC Lead to own the design, governance, and day-to-day operation of application security and GRC Access Control across the company's SAP landscape, including SAP S/4HANA, Fiori, SAP Business Technology Platform (BTP), and integrated SAP and non-SAP applications.

This role leads a small, hands-on security team and is accountable for both business-as-usual (BAU) security support and the security workstream for new SAP rollouts and deployments.

The architect partners closely with SAP functional, Basis, and development teams, Internal Audit, and Risk & Compliance to keep access secure, compliant with SOX requirements, and efficient for the business.

Job Location

This role is a remote role based out of Atlanta, GA.

Job Responsibilities

Team Leadership & Contractor Management


* Lead, coach, and develop direct reports, setting clear goals, priorities, and development plans.


* Direct the day-to-day work of contract and SI/AMS security resources, assigning work, reviewing deliverables, and holding partners accountable to SLAs and quality standards.


* Establish coverage models, escalation paths, and run books so BAU support and project work are both staffed appropriately.


* Serve as the senior technical authority for SAP security and GRC, providing guidance to SAP technical and non-technical staff.

Security Architecture & GRC Governance


* Own the SAP security architecture and role design strategy across S/4HANA, Fiori, BTP, and integrated applications, setting standards for role design, naming, and role-to-user assignment in production and non-production systems.


* Establish and govern a centralized process for role administration and role design for functional (order to cash, procure to pay, record to report) and cross-functional (reporting, IT, testing) processes.


* Own the GRC Access Control configuration, including rulesets, segregation-of-duties (SoD) governance, mitigating controls, workflows, and approvers for provisioning, de-provisioning, and access recertification.


* Own Firefighter (emergency access) governance, including assignment, ...