Security and Compliance Lead

The Security and Compliance Lead is responsible for architecting, implementing, and governing security and compliance controls across SAP, BI, and enterprise data platforms. This role will drive SOX compliance, audit readiness, and row-level security, ensuring robust access controls, monitoring, and regulatory adherence. The Security and Compliance Lead will partner with IT, business, and audit teams to proactively identify risks, remediate gaps, and enable secure, compliant operations for all critical business systems.

RESPONSIBILITIES

• Lead SOX compliance and audit readiness: Oversee the design, implementation, and monitoring of SOX controls for SAP, BI, and data platforms; coordinate with internal and external auditors to ensure timely and successful audits.
• Architect and enforce row-level security: Implement and govern row-level security for SAP (authorization objects, roles, profiles) and BI platforms (ThoughtSpot, Power BI, Databricks SQL endpoints), ensuring least-privilege access and data segregation.
• Access management and segregation of duties (SoD): Define, implement, and monitor role-based access controls (RBAC), SoD policies, and user provisioning/deprovisioning processes across SAP, BI, and data lake environments.
• Continuous monitoring and alerting: Deploy and manage security monitoring tools (Azure Security Center, Databricks Unity Catalog, SAP GRC, etc.) for real-time detection of policy violations, suspicious activity, and compliance drift.
• Policy and standards development: Develop, maintain, and enforce security and compliance policies, standards, and procedures aligned with SOX, GDPR, ITAR, DFARS, CMMC, and other relevant regulations.
• Data privacy and protection: Ensure encryption, masking, and secure handling of sensitive data in SAP, BI, and data lake environments; oversee data retention and destruction policies.
• Incident response and remediation: Lead investigations of security incidents, compliance breaches, and audit findings; drive root cause analysis and corrective actions.
• Training and awareness: Develop and deliver security and compliance training for IT and business users; promote a culture of security and compliance across the organization.
• Stakeholder engagement: Collaborate with business, IT, and audit teams to understand requirements, communicate risks, and drive adoption of security and compliance best practices.
• Continuous improvement: Capture lessons learned, update security and compliance playbooks, and drive automation and process improvements.
• Reporting and metrics: Architect dashboards and reports to track compliance status, audit findings, access reviews, and risk posture for executive leadership.

Essential Qualifications / Experience

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field.
• 7+ years of experience in IT security, compliance, or audit roles, with a focus on SAP and BI platforms.
• Deep expertise in SOX compliance, audit management, and remediation for enterprise applications.
• Hands-on experience with SAP security (roles, profiles, authorization objects, SOD, GRC), BI security (row-level security in ThoughtSpot, Power BI, Databricks), and Azure security controls.
• Strong knowledge of regulatory frameworks (SOX, GDPR, ITAR, DFARS, CMMC, UK MOD) and data privacy best practices.
• Experience with security monitoring, incident response, and access management tools.
• Excellent communication and executive-level presentation skills; ability to simplify complex topics and influence decision-making.

Desirable Qualifications / Experience

• Advanced degree (MBA/MS) in Information Systems, Engineering, or related field.
• Relevant certifications (CISA, CISM, CISSP, SAP Security, Azure Security).
• Experience with SAP GRC, Databricks Unity Catalog, and automated access review solutions.
• Familiarity with DevOps/CI-CD security practices and cloud-native security tools.
• Experience managing cross-functional global teams and third-party vendors/auditors.

Key Expectations from the Business

• Executive-ready communication; ability to frame security and compliance risks with business value and mitigation strategies.
• Matrix leadership—able to influence without direct authority and drive consensus across business and IT.
• Strong collaboration, transparency, and accountability; creates an environment where teams deliver results and continuously improve.
• Willingness to travel domestically/internationally to Crane – Panametrics, Druck or Reuter-Stokes locations (up to 25% at peak times).

Key Working Relationships

• Partner with Crane – Panametrics, Druck and Reuter-Stokes Leadership Team, middle management, and IT teams (Security, Compliance, Applications, Data/Analytics).
• Collaborate with functional business leaders (Finance, Operations, Supply Chain, HR) to ensure compliance and risk mitigation.
• Engage with external auditors, regulatory bodies, and system integrators to deliver audit and compliance success.