SAP Access Controls / Project Lead - Remote

Location: Remote

Role Summary: Lead the day-to-day engagement while bridging business controls, SAP access governance and technology selection. This is a hands-on controls and consulting role, not a traditional PM-only position. The consultant will drive requirements and decisions, facilitate SoD/control workshops, coordinate IAG and alternative-tool evaluation, translate technical findings into business-control implications, and design the operating process that remains viable whether the client selects a platform or continues with a structured manual approach.

Key Responsibilities: Manage the integrated workplan, milestones, risks, dependencies, decisions, actions and client coordination. Lead discovery, business/control requirements, SoD validation, technology-evaluation, findings and pilot-validation workshops. Confirm stakeholders, decision rights, priority processes, user/role populations and pilot boundaries. Document requirements for access transparency, SoD monitoring, provisioning, certification, remediation/mitigation, evidence retention and audit support. Partner with the SAP Access Governance / IAG Lead to define technology evaluation criteria and coordinate IAG, Pathlock, Xiting or other relevant platform demonstrations and assessments. Facilitate business/control validation of the SoD ruleset, sensitive-access model and technical findings. Translate access-analysis findings into business risk, control implications, remediation priorities and management decisions. Design the recurring operating model for access review, SoD monitoring, exception management, ownership, evidence retention and audit support. Develop procedures and work instructions for both the selected technology-enabled process and, if needed, a sustainable manual/rules-based review process using SAP extracts and reporting. Maintain the remediation/mitigation register, executive status reporting, decision materials, final readout and implementation/operating roadmap. Actively manage scope and dependencies to keep the initial assessment, technology decision and pilot focused on agreed priority populations and use cases.

Required Qualifications: Strong consulting or project/program leadership experience in SAP access controls, security, governance, risk, audit or related transformation work. Strong working knowledge of SAP SoD, sensitive access, role-based access, provisioning, certification, mitigating controls and audit evidence. Experience designing and operating access-review/SoD processes, including manual or reporting-based control processes where a dedicated governance tool is not used. Ability to facilitate effectively across Finance, Internal Controls/Audit, SAP IT/Security, business process owners and technology vendors. Strong requirements, process-design, governance, RACI, documentation, executive-communication and stakeholder-management skills. Ability to translate technical SAP security findings into clear business-control implications and decisions. Demonstrated success managing time-boxed assessments, technology selections or pilots with multiple dependencies.

Preferred Qualifications: Experience with SAP Cloud IAG access-governance projects is strongly preferred. Experience with Pathlock and/or Xiting evaluations, implementations or operating models is highly preferred. Automotive industry experience, particularly in a large or complex automotive organization, is highly preferred. Big Four, major consulting firm or comparable client-service experience in SAP access/security transformation is preferred.