SAP NS2 Information Security Compliance Expert

• Full-time
• Compensation: USD 176,300 - USD 374,300 - yearly

SAP is the global market leader for business software and related services, and SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary, offering SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.

This position requires access to customer data; must be a U.S. citizen.

SAP NS2 does not offer Visa sponsor ships for this role.

All internal must have manager’s approval to transfer.

What you'll bring

You have deep expertise in compliance strategy, audit leadership, and security governance ong experience in cloud security, Zero Trust principles, IAM, and regulatory alignment is essential, and the ability to define frameworks, influence stakeholders, and advance enterprise-wide compliance maturity is critical. You've led audits end to end, mentored compliance professionals, and shaped how organizations interpret and meet security framework requirements.

What you'll build

You'll lead compliance programs and define enterprise control frameworks aligned with standards such as ISO 27001, NIST, and applicable regulatory requirements. Continuous compliance capabilities, including automated monitoring, risk scoring, and policy enforcement, are yours to establish and maintain. Cloud and AI governance, including model risk management, data privacy, and security controls, falls within your responsibility. You’ll oversee audit planning and execution, guide remediation efforts, and mentor compliance professionals across the team.

Where you belong

You’ll provide leadership across teams, shaping how compliance programs are designed and executed at SAP NS2. The work requires both deep subject matter expertise and the ability to influence people across organizational lines without always having direct authority. Fostering a culture of security, governance, and accountability is part of how success is measured at this level. If you’ve led compliance programs at enterprise scale and you’re looking for broader organizational impact, this is the right fit.

• In-depth knowledge and understanding of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks. This includes, but not limited to, FedRAMP, CMMC, ISO, RMF, and SOC frameworks, DISA policies and NIST security special publications.
• Ability to communicate, both orally and in writing at the senior level.
• Shape executive briefings and decision materials for the SAP NS2 Board, Executive Leadership, Government Leaders and line of business reviews.
• Experience with Department of Defense / War, US Federal Agencies and Intelligence community cyber security practices.
• Ability to understand technical challenges and translate risk and complexity into clear business decisions for senior leaders, customers, and non-technical stakeholders.
• Ability to engage with customers, understanding and addressing their security and compliance needs; and as needed coordinate with internal experts to help shape practical solutions and build trust.
• Review of customer contracts for compliance with security offerings and requirements.
• CISSP or other professional security certification.

All your information will be kept confidential according to EEO guidelines.

About SAP
With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement,…