ERP Security Lead

TMG is assembling the key-personnel team for a prospective multi-year ERP transformation at a U.S. county government: HR, payroll, benefits, finance, budget, procurement and capital assets, moving off a legacy platform. TMG's proposed role is independent: strategy and business case, requirements, ERP vendor and systems-integrator selection, program governance, business readiness and assurance. The selected vendor and SI build, configure, convert and unit-test. Final responsibilities follow the approved statement of work.

The role

Lead security requirements and independent assurance for sensitive HR, payroll, finance and integration data throughout the transformation: vendor-neutral requirements for selection and design, access and segregation-of-duties review, data handling, security testing and production-readiness evidence.

What you will do

• Define vendor-neutral security and compliance requirements for selection and solution design with client IT and security owners.
• Review role-based access, segregation of duties, privileged and service accounts, integration identities and access-review controls.
• Set data-handling, masking, approved-transfer, environment-access and audit-evidence requirements.
• Coordinate security testing, remediation and production-readiness evidence with the client and the SI; support operational handover.
• Document residual-risk decisions for client security-owner acceptance.

Commitment and terms

Advisory involvement during vendor and integrator selection (Phase 2, from mid-2027, about 0.10 FTE); 0.30 FTE through solution design and build (from late 2027); 0.50 FTE through testing and go-live; 0.25 FTE in stabilization.

This is contract consulting, contingent on contract award, client approval and a mutually agreed engagement. Staffing is phased and start dates are staggered from early 2027; continuous full-time work is not assumed. Work is remote for analysis and documentation, with occasional travel to Greensboro, North Carolina, for workshops, design sessions, test starts, rehearsals and cutover. Travel frequency is agreed before you accept.

About The Morganfield Group

The Morganfield Group helps organizations lead complex transformations: enterprise modernization, M&A integration and the recovery of critical programs. Founded in 2013, the firm pairs executive advisory with hands-on delivery leadership, serving executive teams, private-equity operating partners and portfolio companies facing significant change, delivery risk or gaps in transformation leadership. Engagements range from diagnostics and advisory to interim leadership and full program management.

Experience we want to see

• ERP or cloud security on comparable government or regulated programs: access design, segregation of duties, privileged accounts and sensitive-data protection.
• Independent validation of a provider's security design and production readiness, with tested remediation and documented residual risk.
• CISSP, CISA or similar credentials and local-government experience preferred.

How we evaluate

For each role we compare two relevant projects where available: type and scale, your own authority and deliverables, phases completed, decisions you made and measurable results. Verified delivery evidence, sound independent judgment and practical lifecycle-cost reductions count for more than titles or certification lists. Every application is read by a person; there are no automatic cut-offs on years, degrees or certifications.

Independence and consent

You will be asked to disclose current ERP vendor or SI affiliations, referral fees or other financial interests that could bear on independent advice. We assess the actual conflict rather than screening out everyone with prior SI experience. Before any shortlisted candidate is named in a client proposal, TMG obtains explicit written permission and confirms role, availability and commitment. Applying does not authorize proposal inclusion. References are requested separately, with your permission.

How to apply

Attach your current résumé. Show the ERP projects you worked on, what you personally owned, the phases you completed and the measurable outcomes, plus education and certifications (identify platform training as training rather than vendor certification). Shortlisted applicants will be contacted through this platform to discuss availability by phase, travel, consulting rate and potential conflicts.

Consulting rate agreed individually by role and phase. Client-site travel reimbursed at cost under the engagement's pre-approved travel terms. Phased commitment with written confirmation of start date, hours by phase and competing commitments. Engaged as a TMG employee or TMG subcontractor (individual) under a standard subcontract, confidentiality undertaking and insurance requirements.

C2C or W2. Individual consultants only; no agencies or third-party submissions. U.S. work authorization required; no visa sponsorship for this engagement.