Manager, SAP Security and Controls

Location: Durham, NC - USA (Strickland Bldg)

Clorox is the place that’s committed to growth – for our people and our brands. Guided by our purpose and values, and with people at the center of everything we do, we believe every one of us can make a positive impact on consumers, communities, and teammates. Join our team. #CloroxIsThePlace

Your role at Clorox

The Manager, SAP Security & Controls is accountable for SAP Security, Governance, Risk & Compliance (GRC), Identity and Access Governance, and SAP SOX control effectiveness across the enterprise. This senior technical leadership role combines deep hands-on expertise with responsibility for security architecture, control assurance, service delivery, and the future SAP security roadmap.

The successful candidate will set strategy and architecture, lead internal and managed service resources, and remain personally engaged in complex SAP Security, GRC, identity, authorization, and control issues. This role is suited to a leader who can move confidently between senior stakeholder discussions, audit and control decisions, solution design, and detailed technical troubleshooting.

Success in this role means improving SAP control reliability and audit readiness, resolving complex security issues at their root cause, strengthening architecture and access governance, raising the quality and accountability of internal and managed service delivery, and advancing a practical future-state SAP security roadmap. The ideal candidate has personally delivered complex SAP Security and GRC solutions, can lead SOX control execution and remediation, and can shape strategy without losing the ability to work at technical depth.

In this role, you will

Own SAP SOX and ITGC control effectiveness: execute and oversee assigned controls, review evidence quality, provide formal sign-off, assess design and operating effectiveness, and drive sustainable remediation of deficiencies and repeat findings.

Remain hands-on: diagnose and resolve complex authorization, role design, GRC workflow, provisioning, Segregation of Duties, Firefighter, Fiori, cloud identity, and production security issues.

Lead SAP security architecture: define standards, role and authorization models, design principles, and a multi-year roadmap across ECC, S/4HANA, Fiori, BTP, GRC, IAG, IAS, IPS, and connected identity platforms.

Lead delivery and priorities: direct internal resources, contractors, managed service providers, and strategic partners; balance operational support, audit commitments, remediation, projects, and modernization initiatives.

Govern access and identity: lead access provisioning, User Access Reviews, Emergency Access Management, privileged access, role lifecycle, SoD rulesets, authentication, federation, and identity integration.

Influence across the organization: translate technical and control risks for senior leadership and partner effectively with Cybersecurity, IAM, Internal and External Audit, Enterprise Architecture, SAP delivery teams, and business stakeholders.

What we look for

Additional Locations: Pleasanton (CPC), CA - USA