SAP Security Manager

Overview

As part of the Corporate Services organization at Waters Corporation, this role will provide global leadership for the Security workstream supporting future SAP S/4HANA releases, upgrades, and transformation initiatives. The Sr Manager will own and coordinate security design, role build and remediation, segregation of duties analysis, security testing, cutover readiness, deployment, and post-go-live hypercare. The role will partner with business process owners, Enterprise Applications, IT Security and GRC, Internal Controls, Basis, testing, change management, and implementation partners to deliver secure, scalable, and supportable access solutions. This leader will also establish the knowledge transfer, training, documentation, metrics, and governance model required to transition solutions into sustainable operations and drive ongoing process improvement.

Responsibilities

Lead the Security workstream for S/4HANA releases, upgrades, and transformation programs. Translate business and technical requirements into a security delivery plan; manage scope, milestones, dependencies, risks, resources, partner performance, and executive-level status reporting.

Direct future-state SAP security architecture and role design across S/4HANA, Fiori, GRC, and integrated applications. Promote least privilege, scalable role structures, appropriate organizational restrictions, secure privileged access, and alignment with information security and compliance requirements.

Own role build quality, access remediation, segregation of duties analysis, sensitive-access review, and coordination of mitigating controls. Partner with process owners, IT Security and GRC, Internal Controls, and auditors to resolve design gaps and support timely, sustainable remediation.

Plan and oversee security unit, integration, user acceptance, and regression testing. Confirm test identities and role assignments reflect the required access model; manage defects through resolution; and provide evidence of readiness for deployment and control assurance.

Lead security cutover, deployment, and hypercare activities, including production provisioning, transport and access validation, incident triage, escalation, stabilization, and transition to steady-state support. Establish clear readiness criteria, ownership, support coverage, and exit criteria.

Build a sustainable Security operating and governance model. Deliver knowledge transfer, role-owner and support-team training, procedures, standards, service metrics, backlog governance, periodic role optimization, and continuous improvement for future releases and ongoing operations.

Qualifications

Education / Certifications:

Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, Business, Accounting, or related field. SAP security, SAP GRC, CISSP, CISM, CRISC, or equivalent certification preferred.

Experience:

Minimum of 12-15 years of progressive experience in SAP security, identity and access governance, enterprise applications, or related technology risk disciplines, including experience leading SAP S/4HANA implementations, upgrades, releases, or large-scale transformation programs. Experience managing global teams and third-party delivery partners preferred.

Complexity:

Demonstrated expertise and leadership in:

· SAP S/4HANA and Fiori security concepts, role design, authorization objects, user administration, and GRC access controls.

· Least privilege, segregation of duties, sensitive and privileged access, role ownership, access provisioning, and mitigating-control processes.

· Security design, build, remediation, testing, cutover, deployment, hypercare, and transition to steady-state support.

· Regression-test planning, defect governance, root-cause analysis, risk-based decision-making, and production-readiness assessment.

· Governance models, operating procedures, metrics, service management, documentation, training, knowledge transfer, and continuous improvement.

· Cross-functional collaboration with business process owners, Enterprise Applications, Basis, IT Security and GRC, Internal Controls, audit, change management, testing, and implementation partners.

· Clear executive communication, stakeholder influence, issue escalation, vendor management, and delivery in a fast-paced global environment.

· Balancing security, compliance, usability, operational supportability, program timelines, and business continuity.

Company Description

Waters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance. Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide.

Diversity and inclusion are fundamental to our core values at Waters Corporation. It benefits our employees, our products, our customers and our community. Waters complies with all applicable federal, state, and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status, or any other characteristic protected by law. Waters is proud to be an equal opportunity workplace and is an affirmative action employer. All hiring decisions are based solely on qualifications, merit, and business needs at the time.

Key Words SAP S4 Hana, SAP GRC, Security, Project management, ERP Upgrade, ABAP Development