FlexaFlexa
  • Discover companies
  • Find a job
  • Resources
Sign inSign up

Quick links

  • Sign in
  • Sign up
  • Book a demo
  • Live feed

For employers

  • How Flexa can help
  • Case studies
  • Talent Insights Report 2026

For users

  • Discover companies
  • Find a job
  • Resources
  • The Flexa Awards

Flexa info

  • About us
  • Contact us
  • FAQs
  • Legal
FlexaFlexa

© 2026 Flexa, All rights reserved.

  • Privacy policy
  • Terms
Discover companies
Find a job
Resources
View company profileApply now

Working at SAP

  • Company employees
    107,000

Hiring in

  • Global

Office locations

Join SAP NS2 as an Information Security Compliance Expert based in Herndon, United States. In this role, you will lead enterprise compliance programs, define control frameworks, and oversee cloud and AI governance. Applicants must be U.S. citizens due to customer data access requirements.

Requirements

  • In-depth knowledge of cybersecurity and regulatory strategy including FedRAMP, CMMC, ISO, RMF, SOC, DISA policies, and NIST security publications.
  • Experience with Department of Defense, US Federal Agencies, and Intelligence community cybersecurity practices.
  • CISSP or other professional security certification required.
  • Strong communication skills with the ability to brief executive leadership and external stakeholders.
  • Must be a U.S. citizen.

Skills & Responsibilities

  • Compliance Strategy: Define enterprise control frameworks aligned with standards like ISO 27001, NIST, FedRAMP, and CMMC to advance organizational compliance maturity.
  • Audit Leadership: Oversee end-to-end audit planning and execution, guide remediation efforts, and mentor compliance professionals.
  • Cloud and AI Governance: Establish continuous compliance monitoring, automated risk scoring, policy enforcement, model risk management, and data privacy controls.
  • Stakeholder Engagement: Translate technical security risks into clear business decisions for senior leaders, the Board, and customers while reviewing security contracts.
  • Potential transition routes: People from Information Security Management, Risk and Audit, or Cybersecurity Consulting roles may bring regulatory strategy and audit expertise, alongside meeting mandatory security framework and U.S. citizenship requirements.

Job description

Company Description

SAP is the global market leader for business software and related services, and SAP National Security Services Inc.® (SAP NS2®) is an independent U.S. subsidiary, offering SAP solutions with specialized levels of security and support to meet the requirements of U.S. national security and critical infrastructure customers.

This position requires access to customer data; must be a U.S. citizen.

SAP NS2 does not offer Visa sponsorships for this role.

All internal must have manager’s approval to transfer.

Job Description

What you'll bring

You have deep expertise in compliance strategy, audit leadership, and security governance at scale. Strong experience in cloud security, Zero Trust principles, IAM, and regulatory alignment is essential, and the ability to define frameworks, influence stakeholders, and advance enterprise-wide compliance maturity is critical. You've led audits end to end, mentored compliance professionals, and shaped how organizations interpret and meet security framework requirements.

What you'll build

You'll lead compliance programs and define enterprise control frameworks aligned with standards such as ISO 27001, NIST, and applicable regulatory requirements. Continuous compliance capabilities, including automated monitoring, risk scoring, and policy enforcement, are yours to establish and maintain. Cloud and AI governance, including model risk management, data privacy, and security controls, falls within your responsibility. You'll oversee audit planning and execution, guide remediation efforts, and mentor compliance professionals across the team.

Where you belong

You'll provide leadership across teams, shaping how compliance programs are designed and executed at SAP NS2. The work requires both deep subject matter expertise and the ability to influence people across organizational lines without always having direct authority. Fostering a culture of security, governance, and accountability is part of how success is measured at this level. If you've led compliance programs at enterprise scale and you're looking for broader organizational impact, this is the right fit.

Qualifications

  • In-depth knowledge and understanding of Cybersecurity and regulatory strategy, cyber operations, and cyber security frameworks. This includes, but not limited to, FedRAMP, CMMC, ISO, RMF, and SOC frameworks, DISA policies and NIST security special publications.
  • Ability to communicate, both orally and in writing at the senior level.
  • Shape executive briefings and decision materials for the SAP NS2 Board, Executive Leadership, Government Leaders and line of business reviews.
  • Experience with Department of Defense / War, US Federal Agencies and Intelligence community cyber security practices.
Apply now
SAP

SAP NS2 Information Security Compliance Expert

Herndon, Virginia
Competitive salary range with variable incentive opportunities.
  • Ability to understand technical challenges and translate risk and complexity into clear business decisions for senior leaders, customers, and non-technical stakeholders.
  • Ability to engage with customers, understanding and addressing their security and compliance needs; and as needed coordinate with internal experts to help shape practical solutions and build trust.
  • Review of customer contracts for compliance with security offerings and requirements.
  • CISSP or other professional security certification.
  • Additional Information

    All your information will be kept confidential according to EEO guidelines.

    About SAP
    With a global network of customers, partners, employees, and thought leaders, SAP helps the world run better and improves people’s lives.
    As a leader in enterprise applications and business AI, SAP stands at the nexus of business and technology. For over 50 years, organizations have trusted SAP to bring out their best by uniting business-critical operations spanning finance, procurement, HR, supply chain, and customer experience.

    We win with inclusion
    SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.
    SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.
    For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.
    Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.

    Compensation Range Transparency
    SAP believes pay transparency is essential to fostering an honest, supportive, and inclusive culture and is an important part of our commitment to pay equity. The salary range for this position is included in the job posting. The actual compensation offered to the successful candidate will fall within that range and will depend on factors such as education, skills, experience, location, and scope of the role, as determined through the selection process. Where applicable, SAP may also provide variable incentive opportunities and additional benefits, subject to the terms of the relevant plans and policies. Any variable incentive amount is target-based, with actual payouts dependent on company and individual performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.

    AI Usage in the Recruitment Process
    For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
    Please note that any violation of these guidelines may result in disqualification from the hiring process.

    Similar jobs

    BAE Systems

    Security Architect

    London
    Competitive pension, employee share plan, and annual incentive
    SAP

    Local Information Security Officer (LISO) - Sovereign Cloud Delivery France

    Levallois-Perret
    SAP

    Product Security Senior Specialist - Sovereign Cloud

    Multiple locations in Germany
    Airbus

    Cyber Security Risk & Transformation Manager

    Bremen
    BT Group

    Director, Cyber Security & Fraud

    Multiple locations in United Kingdom
    Up to 15% on target bonus + car allowance + pension
    Vodafone

    Security Compliance Expert

    Pune, Maharashtra