IT Security Lead - Global SAP

PURPOSE OF THE JOB

The Security Lead – Global SAP is a critical member of the Owens Corning Global Information Services (GIS) Security team. The incumbent is responsible for driving the enterprise-wide SAP security strategy. This role ensures the protection and integrity of SAP systems—both on-premises and cloud-hosted applications, including SAP ECC, SAP S/4HANA, and related components—by overseeing access governance, compliance, and risk mitigation efforts.

This position plays a dual role: providing strategic direction for SAP security initiatives and managing the day-to-day execution of identity and access controls, with supervisory responsibility for external operations resources. The role involves close collaboration with IT, finance, audit, and business stakeholders to implement and maintain robust security frameworks, tools, and processes. The Security Lead – Global SAP also manages the performance of external partners delivering SAP Identity and Access Management (IAM) services globally. The ideal candidate is a proactive leader with a strong foundation in SAP security architecture, a deep understanding of compliance frameworks, and a passion for continuous improvement. Curiosity, motivation to learn, integrity, and honesty are essential traits for success in this role. The Global SAP Security Lead must be comfortable working in a dynamic environment with multiple tasks and deadlines and must be able to adjust priorities as needed. A thorough background check is required, and the candidate must be free of any technology-related crimes or violations of security policies.

 

Reports to:                          Leader, GIS – Governance Risk and Compliance

Span of Control:                Individual Contributor; will lead ~4 external resources

 

While we prefer candidates based in Toledo, we may consider exceptional applicants with relevant experience from other locations

 

JOB RESPONSIBILITIES

 

Knowing Our Businesses and their Strategies

• Create and manage conversations with key stakeholders that drive understanding, action, and follow-up of strategy.
• Provide guidance and have knowledge of cyber security processes, solutions, and results
• Understand the strategic direction of the company’s businesses; execute functional strategies to support and enhance business results and be knowledgeable of the project work that supports this direction and implications to the business.

 

Executing Strategy

• Design, implement and govern of SAP security architecture across ECC, S/4 HANA, and cloud platforms, aligning with enterprise risk management strategies and regulatory compliance (e.g., SOX, GDPR, NIST).
• Collaborate with cross-functional teams (Basis, Internal Audit, Finance and Business Process Owners) to proactively identify and mitigate security risks while enabling business agility.
• Lead SAP security through platform ownership and management of technical controls and processes, including access controls, standards, role administration, solution development, system changes, audit remediation, risk mitigation, segregation of duties (SoD), vulnerability management, and other related functions.

• Provide strategic and operational leadership for SAP security across both on-premises and cloud-based SAP environments, including SAP Business Technology Platform (BTP).
• Provide SAP security expertise for system implementations, upgrades, and enhancements.
• Partner with project teams to integrate security requirements into solution design and delivery.
• Design, implement, and maintain SAP role-based access controls, ensuring alignment with business needs and compliance requirements.
• Partner with GIS security leaders and business stakeholders to develop and execute a regular schedule of audits for SAP security technologies, processes, and controls.
• Provide oversight, direction, and prioritization of work for the SAP Security operations team.
• Develop and drive metrics, service levels, and management systems to ensure consistent application of SAP security standards by the SAP Security operations team.
• Work closely with the Internal Controls (SOX compliance) team, as well as internal and external auditors, to provide system data, process documentation, and security expertise to demonstrate compliance.
• Conduct ongoing audits based on OC's security policies, standards, and indus