Principal Engineer, Security & Compliance

NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data, and providing leading-edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport. We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally.

Our teams are innovative, diverse, multidisciplinary, and collaborative, taking technology into the future and bringing the world with it

We are looking for a Principal SAP Application Security Engineer at NIKE Technology.

Your role on the team will be to own, design, and manage a competitive application security strategy, and drive best practices. This is a critical role within the organization that will enable tools and processes in the delivery of technology that will transform our application security solutions. You will work in close partnership withother leaders throughout NIKE to ensurewe embrace industry-leading innovations, trends, transformations and support strategic priorities for NIKE'srapidly growing business.

This position will require that you bring a strong background in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job."

This role will be performing these key tasks:

• Create, drive and own NIKE's SAP Multi-year Security strategy, Develop Roadmaps aligning with industry best practices and NIKE Corporate Information Security framework.

• Manage a Master Service Partner to execute and deliver the SAP Security strategy.
• Lead the delivery of work during quarterly planning workshops aligning the work to existing priorities in accordance with the strategy, roadmap and business requirements.
• Research and implement leading technology solutions to protect data, comply with global regulations
• Work with business to create Risk Control Matrix, Design GRC risks, and Segregation of Duties ruleset
• Partner with SAP AG to influence product enhancements/roadmaps to align newer technologies with evolving Security best practices
• Partner with NIKE Corporate Information Security, Finance Governance & Controls, Internal Controls, Global Risk Management teams to develop a Secure and Compliant SAP Security framework
• Partner with Corporate Information Security to have a solid governance process for Critical SAP Security patches in accordance with NIST
• Technical knowledge and proven experience in communicating with both highly technical audiences and non-highly technical audiences
• Ability to adjust communication style and approach, from strategic leadership to highly technical audiences

You will work in close partnership withother leaders throughout NIKE's technical and business community to ensureNIKETechnology embraces industry-leading innovations, trends, and transformations and accelerates and supports business strategies and priorities for NIKE’srapidly growing business.

This position will require that you bring a strong background in in the application security field and SAP Technologies, combined with the facilitation and influencing skills needed to shape NIKE's future direction. This is a position that will allow you to exercise your leadership, interpersonal, and technical skills. It will be rewarding yet challenging at the same time. This is not "just another job".

• Bachelor's Degree in Computer Science or a related field experience. Will accept any suitable combination of education, experience or training.
• 13+ years experience in SAP Security with at least five full cycle implementation/upgrade projects
• 5+ years of experience with SAP GRC Access Control 12.x implementation and configuration
• A solid background in a consulting services firm or similar service delivery and engagement model
• A credible certification in the relevant field is preferred

• Experience with implementing SAP GRC Process Controls
• CISSP certification
• CISA certification
• SAP Security Certification

We offer a number of accommodations to complete our interview process including screen readers, sign language interpreters,…