SAP Security Lead

About the Company
e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys and Naturium, high-performance, biocompatible, clinically-effective and accessible skincare.
In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 26 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last four fiscal years), equity, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry.
Visit our Career Page to learn more about our team: 
Position Summary: e.l.f. Beauty is looking for an SAP Security Lead to join our dynamic, fast-paced team. The Security Lead is responsible for managing and maintaining the security of the SAP landscape, including user access, roles, authorizations, and compliance with security policies. The role involves collaborating with various teams to ensure the integrity and confidentiality of SAP systems and data. Responsibilities:

User and Role Administration:Administer user accounts, roles, and authorizations within the SAP environment.Create, modify, and deactivate user accounts based on business requirements and employee status changes. Role Design and Maintenance:Design and maintain SAP security roles to align with business processes and compliance requirements.Collaborate with business process owners and IT teams to ensure proper role assignments. Authorization Management:Define and manage authorizations to ensure users have the appropriate access levels required for their roles.Regularly review and audit user authorizations to identify and address security risks. Security Policy Enforcement:Enforce security policies, procedures, and standards in alignment with organizational and industry security best practices.Collaborate with the compliance team to ensure SAP security aligns with regulatory requirements. Security Monitoring and Incident Response:Monitor SAP security logs and alerts to identify and respond to security incidents.Work with the incident response team to investigate and mitigate security breaches or vulnerabilities. User Training and Awareness:Provide training to SAP users on security best practices and policies.Raise awareness about security risks and promote a culture of security within the organization. Segregation of Duties (SoD) Analysis:Conduct SoD analysis to identify and mitigate conflicts in user access.Collaborate with business units to address and resolve identified conflicts. Emergency Access Management:Manage emergency access procedures and logs.Ensure that emergency access is granted and monitored in accordance with established policies. Security Documentation and Audit Support:Maintain comprehensive documentation of SAP security configurations, roles, and procedures.Support audit activities by providing necessary documentation and evidence of security controls. Requirements:

• Bachelor's degree in information technology, Computer Science, or a related field.
• Proven experience as an SAP Security Lead or in a similar role.
• In-depth knowledge of SAP security concepts, including user management, role design, and authorization administration.
• Deep understanding of SAP GRC (FF/EAM, SoD, Risk Analysis, Access Request).
• Experience with ITGC, SOX, and audit compliance
• Exposure to cloud integrations (BTP, CPI, IAS/IPS, IBP)
• Familiarity with ServiceNow workflow/ticketing/integrations.
• Familiarity with identity provider/SSO setup (Okta/SAML2/etc.)
• Understanding of regulatory requirements related to data security and privacy.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.

This job description is intended to describe the general nature and level of work being performed in this position. It also reflects the general details considered necessary to describe the principal functions of the job identified, and shall not be considered, as detailed description of all the work required inherent in the job. It is not an exhaustive list of responsibilities, and it is subject to changes and exceptions at the supervisors' discretion.
e.l.f. Beauty respects your privacy. Please see our Job Applicant Privacy Notice ) for how your personal information is used and shared. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

---