Amazon Leo is Amazon’s low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we’ve designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity.
We are seeking a SAP security lead you would be responsible for maintaining security postures of SAP applications, maintenance of teams groups and other supporting authorizations for enterprise applications.
Export Control Requirement:
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
Key job responsibilities
- Design and implement SAP application security roles across S/4, MES, GTS, EWM, MDG, TM including Fiori role needs
- Proven experience with SAP GRC, including implementation, configuration, and maintenance
- Ensure compliance with a range of regulatory and Leo internal policies
- Analyze security systems and seek improvements on a continuous basis
- Develop best practices and security standards for enterprise application system
- Ability to conduct risk assessments, evaluate and quantify risk
A day in the life
We're looking for an 'SAP Security and GRC Expert’, whose objective and responsibility will be to develop high quality security processes and security role designs that support multi entity, complex role structure. Work closely with solution architects, business stakeholders and external partners to develop and maintain security standards to meet Leo Infosec, SOX and ITAR/FAR needs. The individual will support security requirements in S/4, MES, GTS, EWM, MDG, TM and also extend to few non-SAP applications in Leo's ERP landscape. Provide hands on support and troubleshooting for production issues and system maintenance needs.- Bachelor's degree in Computer Science, Information Technology, or a related field
- 5+ years of GRC implementation
- 5+ years of SAP security design experience
- 5+ years of business role design, Fiori role design- Experience that includes strong analytical skills, attention to detail, and effective communication abilities
- Experience working effectively across cross-functional teams and partnering well with people at all levels within an organization
- 5+ years working on SAP RISE model
- Understanding of IT security best practices and standards for ITAR data, Restricted data handling
- Experience with Privacy data and restricted role designing
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $84,100/year in our lowest geographic market up to $179,900/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit
https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
