Team lead SAP security - security second line IT

Over de vacature

Overview

In this role, you lead the SAP Security domain within ASML's Security Second Line IT, guiding a small team to deliver risk-based security outcomes. You shape the SAP security roadmap, governance, and operating model, partnering with cross-functional teams to improve risk posture and regulatory compliance. You drive continuous improvement, automation, and secure-by-design practices across SAP landscapes. This is a strategic, leadership-focused role with meaningful impact on enterprise security.

Verantwoordelijkheden

• Lead and manage a high-performing SAP Security team ( 5 FTE) and align priorities with risk appetite
• Provide independent risk reviews, assessments, and advisory on SAP security controls
• Act as primary focal point for SAP security audits, regulatory reviews, and assurance activities
• Develop and maintain policies, standards, baselines, and control frameworks for SAP Security
• Translate market developments into risk-based requirements and step-ups in the security environment
• Drive roadmap, capability maturity, and operating model improvements for SAP Security
• Ensure security-by-design principles across planning, design, implementation, and operations
• Monitor and report on risk exposure, remediation progress, and control maturity
• Support strategic programs from an SAP security perspective and ensure cross-domain collaboration
• Lead across SAP security disciplines: access, application, platform, cloud security, data protection, vulnerability management
• Escalate and resolve high-priority security matters and lead cross-team improvement initiatives

Belangrijkste vereisten

• 10+ years in cybersecurity, SAP security, risk management, audit or assurance functions

• Experience with SAP ECC, S/4HANA, Fiori, HANA, BTP and SAP cloud services (preferred)

• CISSP, CISM, CRISC, CISA or SAP Security certifications (preferred)

• Strong leadership, coaching, and team-building in international environments

• Trusted advisor with deep SAP Security expertise (authorization concepts, SAP GRC, SoD controls, IAM)

• Experience in security governance, risk management, control design, compliance and audit evidence

• Excellent stakeholder management and ability to influence across engineering, architecture, audit and boards

• Analytical ability to explain complex risks to diverse audiences

• Knowledge of DevSecOps, CI/CD, Automation, Project management and Agile (advantage)

• Professional fluency in English

• Resilience and continuous improvement mindset

• leadership and people-development

• stakeholder management

• analytical and risk communication

• SAP authorization concepts

• SAP GRC

• SoD controls

Advertentie Cv voorbeelden voor ICT & Automatisering: zo ziet een sterk cv eruit Bekijk het voorbeeld en maak je eigen versie. Bekijk voorbeeld Geen account nodig