Senior Lead, SAP Security, GRC & Compliance PVH Corp

Position: Senior Lead, SAP Security, GRC & Compliance- - PVH Corp.
*
* About Us:

*
* We are brand builders who focus our passion and creativity to build Calvin Klein and TOMMY HILFIGER into the most desirable lifestyle brands in the world and at the same time position PVH as one of the best-performing brand groups in our sector. Guided by our values and enabled by our scale and global reach, we are driving fashion forward for good, as one team with one vision and one plan.

That's the Power of Us, that's the Power of PVH+.   

One of PVH's greatest strengths is our people. Our collective desire is to create a workplace environment where every individual is valued, and every voice is heard, and we are committed to fostering an inclusive and diverse community of associates with a strong sense of belonging. Learn more about Inclusion & Diversity at PVH  
** here ()**  .

*
* About the Role:

*
* The Senior Lead, SAP Security, GRC & Compliance will act as a Subject Matter Expert (SME) for SAP Security & GRC including managing multiple SAP GRC instances, engaging with 3rd part operational support teams, managing features and functionality in the SAP GRC environment, planning upgrades and new features releases and overseeing key SOX controls for the SAP GRC environments.

** What You'll Do:*
* +  
** Security Design:
** Developing and implementing SAP security, including role design, authorization objects, and user access controls across various SAP modules (S/4

HANA, EWM, FMS CAR, Fiori, BW, ECC etc.).

+  
** GRC Configuration & Management:
** Configuring and managing SAP GRC modules, primarily Access Control (AC), Process Control (PC), and Risk Management, to automate security processes, manage risk assessments, and enforce compliance.

+  
** Access Management & Provisioning:
** Overseeing the user lifecycle, including user provisioning/deprovisioning, managing emergency access (e.g., "firefighter" access), and conducting regular access reviews to mitigate security risks.

+  
** Segregation of Duties (SoD) & Risk Analysis:
** Performing SoD and critical access (CA) analysis, developing/refining the GRC ruleset, and working with business process owners to define and manage mitigating controls.

+  
** Compliance & Audit Support:
** Ensuring compliance with internal policies and external regulations (e.g., SOX, GDPR, HIPAA, NIST, J-SOX). This includes supporting internal and external auditors by providing evidence, running reports, and resolving audit issues.

+  
** Incident Response & Monitoring:
** Monitoring SAP systems for suspicious activity, investigating security incidents, identifying vulnerabilities, and implementing corrective actions.

+  
** Collaboration & Guidance:
** Acting as a technical lead, providing guidance to business stakeholders and other IT teams (Basis, development, functional analysts) on security issues and best practices.

+  
** Documentation & Training:
** Creating and maintaining technical documentation, standard operating procedures, and delivering security awareness training to users and internal teams.

** What You'll Bring:*
* + Bachelor's degree in Computer Science or Accounting or related field is required.

** Required

Skills & Qualifications *
* +  
*
* Experience:

** Minimum of 8-10+ years of experience in SAP Security and GRC, with hands-on experience in configuration and implementation across various SAP landscapes (on-premise and cloud).

+  
** Technical Expertise:
** Knowledge of SAP security concepts (roles, profiles, authorization objects, SU24, PFCG) and proficiency in GRC Access Control, Process Control, and Risk Management modules.  

Experience with SAP ECC, SAP EWM, SAP S/4 and SAP RISE environments.

+  
** Compliance Knowledge:
** Understanding of compliance frameworks and security auditing techniques.

+  
** Problem-Solving:
** Analytical, problem-solving, and troubleshooting skills to diagnose complex security and access issues.

+  
** Communication:
** Communication skills, with the ability to translate complex technical security concepts into business-relevant language for non-technical stakeholders.

** INTERNAL & EXTERNAL CONTACTS:*
* ** Internal:
** IT Users, Project Managers, Business users, VP and SVP

** External:
** Contract programmers, Consultants and third-party…