Job Description: Role: SAP Cloud ERP Security & IAM Lead Location: Chicago, IL Remote (Only EST and CST time zone) Duration: 12 Months Role Summary Lead SAP S/4HANA Cloud Public Edition security, identity, authorization, and access governance in a post-go-live environment. Key Responsibilities Design and govern business roles, catalogs, IAM apps, and authorization restrictions. Manage user lifecycle, role assignments, least-privilege access, and segregation of duties (SoD). Govern SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning. Lead access reviews, risk remediation, privileged access governance, and audit readiness. Troubleshoot production access issues and manage security incidents. Assess SAP releases, validate authorization changes, and ensure security regression testing. Coordinate with Corporate IAM, HR, Audit, Compliance, SAP functional teams, and BTP teams. Improve access automation, monitoring, role simplification, and operational efficiency. Required Qualifications Bachelor’s degree or equivalent professional experience. 8+ years of SAP Security, Authorization, or IAM experience. Hands-on SAP S/4HANA security experience, preferably Public Cloud Edition. Strong knowledge of business-role design, organizational restrictions, SoD, and user lifecycle management. Experience with SAP Cloud Identity Services, SSO, provisioning, audits, and production support. Preferred Skills SAP Cloud Identity Access Governance or enterprise IGA/GRC tools. Microsoft Entra ID, SAP BTP, Ariba, and Fieldglass access governance. Knowledge of SOX, ITGC, ISO 27001, NIST, and ITIL.