Global Physical Security - Global Head of Insider Threat

 We help the world run better

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

SAP People Protect, Global Physical Security mission is to provide Best-in-Class Physical Security Solutions, meeting Industry Best Practices to Protect SAP Brand, Personnel and Assets.  People Protect, Physical Security is the Primary Physical Security Stakeholder in the SAP Organization, managing various Physical Security Services to ensure the Physical Safety and Security of SAP, and its Assets (Data, Facilities, Peoples, Products, Processes). 

 

Global Physical Security – Global Head of Insider Threat

This position will be accountable for leading the creation of an organization responsible for the standards and procedures specific to the identification, monitoring, testing, evaluation, and governance of insider risk processes and controls for the company. You will leverage your expertise and experience to advance the company’s framework and program for identifying and mitigating threats and related insider risks. The leader will work closely with various partners within SAP, including but not limited to Cyber Defense, Cyber IR and Recovery, IT, Global Cloud Services, Security Risk Management & Compliance, Legal, Human Resources, and Government Services, as well as external partners. This role provides an opportunity to work across a large and complex organization that features prominently in both U.S. critical infrastructure and the global financial ecosystem. The Global Head is expected to bring strong leadership to a small, expert team and to guide efforts to leverage technical and non-technical datasets for early detection of and response to insider risks. Lastly, the leader is responsible for leading collaboration and partnership with cross-functional stakeholders and Line of Business leadership across the organization to guide insider risk inquiries, investigations, and incidents.

 

EXPECTATIONS AND TASKS

• Coordinate development and execution of the Insider Threat Program across key stakeholders including Cyber Security (Defense and IR), Human Resources, Legal, Security Risk & Compliance
• Leverage corporate and industry frameworks to structure Insider the insider risk framework and program
• Develop a strategy to govern Insider Threats across the company working closely with the Intelligence, Threat, and Crisis Management, Cyber Threat Intelligence, Corporate Security Investigations, and various domain owners.
• Assess processes, controls, technologies, metrics, and reporting used for Insider Risk.
• Engage with various security and control teams understand the control environment, both procedural and technical
• Partner closely with programs on Insider Risk, Strategic Threats, Workplace Violence, and key stakeholders
• Collaborate on the build and implementation of processes and technologies to detect high-risk insider activities that are accidental or malicious in nature
• Develops mechanisms to monitor and test the effectiveness of insider risk solutions and associated analytical models
• Work to identify and implement opportunities for continuous program improvement.
• Liaison with external industry resources (e.g., law enforcement, government, emergency responders, industry peers & associations, etc.)

REQUIRED EDUCATION AND QUALIFICATIONS / SKILLS AND COMPETENCIES  

• BS/BA Degree preferred
• 10+ years’ proven experience in program management and development of an Insider Threat/Risk Program
• Extensive knowledge of governance and risk management frameworks
• Demonstrated technical acumen and extensive experience in and knowledge of cybersecurity architecture, controls, and operations.
• Skills Required: Requires seven (7) years of experience in the following: Security Architecture; Financial S