Senior Lead, SAP Security, GRC & Compliance- PVH Corp.
Senior internal IT role at PVH Corp (Calvin Klein, TOMMY HILFIGER) based in India: act as SME for SAP Security & GRC — designing SAP security roles and access controls, managing GRC modules (Access Control, Process Control, Risk Management), running SoD/risk analysis, user provisioning, and supporting SOX and other compliance audits.
- Compensation
- Not disclosed
- Location
- Office India
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Contract
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science or Accounting or related field
- Minimum 8-10+ years of experience in SAP Security and GRC
- Hands-on configuration and implementation experience across on-premise and cloud SAP landscapes
- Knowledge of SAP security concepts (roles, profiles, authorization objects, SU24, PFCG)
- Proficiency in GRC Access Control, Process Control, and Risk Management modules
- Experience with SAP ECC, SAP EWM, SAP S/4 and SAP RISE environments
- Understanding of compliance frameworks and security auditing techniques
- Analytical, problem-solving, and troubleshooting skills for complex security and access issues
- Communication skills to translate technical security concepts for non-technical stakeholders
Full description
About Us:
We are brand builders who focus our passion and creativity to build Calvin Klein and TOMMY HILFIGER into the most desirable lifestyle brands in the world and at the same time position PVH as one of the best-performing brand groups in our sector. Guided by our values and enabled by our scale and global reach, we are driving fashion forward for good, as one team with one vision and one plan. That’s the Power of Us, that’s the Power of PVH+.
One of PVH’s greatest strengths is our people. Our collective desire is to create a workplace environment where every individual is valued, and every voice is heard, and we are committed to fostering an inclusive and diverse community of associates with a strong sense of belonging. Learn more about Inclusion & Diversity at PVH here.
bout the Role:
The Senior Lead, SAP Security, GRC & Compliance will act as a Subject Matter Expert (SME) for SAP Security & GRC including managing multiple SAP GRC instances, engaging with 3rd part operational support teams, managing features and functionality in the SAP GRC environment, planning upgrades and new features releases and overseeing key SOX controls for the SAP GRC environments.
What You'll Do:
- Security Design: Developing and implementing SAP security, including role design, authorization objects, and user access controls across various SAP modules (S/4HANA, EWM, FMS CAR, Fiori, BW, ECC etc.).
- GRC Configuration & Management: Configuring and managing SAP GRC modules, primarily Access Control (AC), Process Control (PC), and Risk Management, to automate security processes, manage risk assessments, and enforce compliance.
- Access Management & Provisioning: Overseeing the user lifecycle, including user provisioning/deprovisioning, managing emergency access (e.g., "firefighter" access), and conducting regular access reviews to mitigate security risks.
- Segregation of Duties (SoD) & Risk Analysis: Performing SoD and critical access (CA) analysis, developing/refining the GRC ruleset, and working with business process owners to define and manage mitigating controls.
- Compliance & Audit Support: Ensuring compliance with internal policies and external regulations (e.g., SOX, GDPR, HIPAA, NIST, J-SOX). This includes supporting internal and external auditors by providing evidence, running reports, and resolving audit issues.
- Incident Response & Monitoring: Monitoring SAP systems for suspicious activity, investigating security incidents, identifying vulnerabilities, and implementing corrective actions.
- Collaboration & Guidance: Acting as a technical lead, providing guidance to business stakeholders and other IT teams (Basis, development, functional analysts) on security issues and best practices.