SAP Security SOX Specialist

About the role

Amrize, a construction materials and infrastructure partner, is hiring an SAP Security SOX Specialist in Bogotá or Medellín on a hybrid basis. The role executes SAP compliance activities and keeps audit readiness high through careful control execution, access governance and complete supporting evidence, supporting the SOX Lead in meeting control obligations across the SAP environments.

Key responsibilities

• Run yearly, quarterly and monthly IT General Controls (ITGCs) with complete, accurate and timely evidence.
• Handle User Access Review (UAR) and Privileged User Access Review (PUAR) campaigns, from preparation and reviewer coordination to tracking, escalation and closure.
• Track access review decisions and verify that required remediation is completed and documented.
• Provide compliance support for S/4HANA, including control requirements, access governance and audit evidence.
• Coordinate responses to internal and external audit requests.
• Identify control gaps, track corrective actions and escalate overdue items to the SAP SOX Lead.

Required profile

• At least 5 years of experience in SAP security, access governance or IT compliance within a SOX-controlled environment.
• Ability to assess evidence, identify control gaps and manage remediation follow-up.
• Strong written communication, organisation and stakeholder coordination skills.
• English at B2 level.

Required skills

• Working knowledge of ITGCs, segregation of duties, access reviews and audit documentation.
• Experience with SAP GRC and S/4HANA is preferred.

What we offer

• Three extra-legal bonuses per year, equivalent to one monthly salary each.
• Annual corporate performance bonus.
• Monthly food vouchers and internet allowance.
• 12 half-days off per year and birthday leave.
• 66% coverage of a prepaid health plan and life insurance.