SAP NS2 Senior Risk Specialist

We help the world run better

At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. 

 

NS2 COMPANY DESCRIPTION 

SAP is the global market leader for business software and related services. SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary of SAP.  At SAP NS2, we leverage best-in-breed technologies engineered by SAP to protect the lives, assets and information of Americans.  We offer SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers. 

 

This position requires access to customer data; Must be a U.S. citizen. SAP NS2 does not offer Visa sponsorships for this role.  All internals must have manager’s approval to transfer. 

 

JOB SUMMARY:

The Senior Risk Specialist plays a pivotal role in NS2’s Office of the Chief Operating Officer (oCOO), working with both internal and external stakeholders to identify, assess, and mitigate business risks. This role involves identifying and remediating deficiencies in the design and operational effectiveness of internal controls to improve business process performance and the quality of products and services.  

 

The Senior Risk Specialist will ensure compliance with SAP's risk management policies and model by facilitating comprehensive risk assessments, monitoring key business risks, and providing expert guidance on managing moderate to high complexity risks associated with opportunities, projects, and business-related issues across all of SAP NS2’s Lines of Business. 

 

KEY RESPONSIBILITIES: 

Enterprise Risk Management: 

• Stay abreast of industry best practices, emerging risks, and regulatory changes to enhance the effectiveness of the Risk & Assurance Program. 

• Provide expert advice and coaching to management and employees on enterprise risk management matters. 

• Conduct detailed risk assessments and business impact analyses to identify potential threats and weaknesses within the organization at the enterprise, process, system, and deal levels. 

• Develop and implement proactive strategies to address identified risks and resolve complex problems. 

• Identify and assess risks across various organizational areas, including operational, financial, strategic, and compliance domains. 

• Review and evaluate internal controls and make recommendations for subsidiary audits, including those involving subcontractors and partners. 

• Identify vulnerabilities, such as fraud risks and operational inefficiencies, and recommend appropriate mitigation measures. 

• Assist in designing controls using a blend of automated tools, manual procedures, analytics, and reporting mechanisms. 

• Monitor and evaluate the effectiveness of risk mitigation measures and adjust strategies as needed. 

• Evaluate the risk management practices of third-party vendors and service providers, including reviewing risk reports and identifying critical risks requiring remediation. 

• Coordinate the collection of necessary documentation, such as security certifications, audit reports, and compliance evidence. 

• Develop and report on program performance indicators and metrics related to risk and compliance to leadership. 

Assurance (Internal Audit): 

• Collaborate with security, legal, compliance, and other stakeholders to enforce and assess adherence to compliance requirements. 

• Monitor and assess