Lead - SAP Basis

Role Summary The Assistant Manager – SAP Basis & Security is responsible for leading the administration, security, and governance of SAP systems across hybrid (cloud and on-premises) environments. The role ensures system stability, secure access management, compliance with audit requirements, and seamless integration across SAP applications including S/4HANA, BTP, Ariba, SuccessFactors, and MDG. This position combines technical leadership, operational ownership, and governance accountability, aligned with enterprise-scale SAP landscapes and cybersecurity standards. Key Responsibilities 1. SAP Basis Administration & Operations - Lead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, and troubleshooting - Manage transports, system refreshes, upgrades, patches, and kernel updates - Monitor system health, batch jobs, logs, interfaces, RFCs, and database performance - Coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance 2. SAP Security & Authorization - Design and maintain SAP roles and authorization structures aligned with least privilege and SoD principles - Manage user provisioning, role assignments, and authorization troubleshooting - Conduct user access reviews, emergency access (firefighter), and remediation activities - Provide audit evidence, access reports, and compliance documentation 3. SAP GRC & Access Governance - Configure and support SAP GRC modules (ARA, ARM, EAM, BRM) - Manage SoD rules, risk analysis, mitigation controls, and workflows - Support SAP IAG for cloud-based access governance across SAP SaaS applications - Lead periodic access certifications and audit remediation activities 4. SAP Cloud Security (BTP, IAS, IPS, Work Zone) - Administer SAP BTP subaccounts, role collections, destinations, and trust configurations - Configure IAS for SSO, identity federation, and authentication policies - Manage IPS for user and role provisioning across SAP systems - Support Work Zone access control and launchpad content configuration 5. SAP Application Security (MDG, Ariba, SuccessFactors) - Manage security and access controls across SAP MDG, Ariba, and SuccessFactors - Ensure secure integration between SAP S/4HANA and cloud systems - Support role design, provisioning, and access troubleshooting for business users 6. Identity & Integration Security - Design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration - Manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps) - Troubleshoot federation, certificates, tokens, and login failures 7. Compliance, Audit & Operations - Ensure adherence to internal security policies, audit requirements, and cybersecurity standards - Support audits with system logs, access controls, and compliance evidence - Participate in incident, change, and problem management processes - Prepare technical documentation and operational procedures Required Skills & Experience - Strong experience in SAP Basis & Security administration - Expertise in SAP S/4HANA authorization and role design - Hands-on experience with SAP GRC Access Control and/or SAP IAG - Experience in SAP BTP security, IAS, IPS, and SSO configurations - Knowledge of integration security (RFC, OAuth, SAML, certificates) - Strong understanding of SoD, audit controls, and compliance frameworks - Experience supporting hybrid SAP environments (cloud + on-premise) Preferred Qualifications - SAP certifications (Basis, Security, GRC, or BTP) - Experience in large-scale SAP transformation programs - Knowledge of SAP Cloud ALM or Solution Manager Soft Skills (Assistant Manager Level) - Leadership mindset with ability to guide teams and vendors - Strong stakeholder communication (business, cybersecurity, and IT) - High ownership and accountability for critical systems - Ability to manage incidents under pressure - Proactive risk identification and continuous improvement focus Education - Bachelor’s degree in IT, Computer Science, Engineering, or related field Experience Required - 8–10+ years in SAP Basis & Security - Strong hands-on experience with SAP S/4HANA and SAP cloud security - Experience in GRC/IAG implementation is highly preferred

Experience Required: 8–10+ years in SAP Basis & Security with strong hands-on experience in SAP S/4HANA and SAP cloud security. Proficiency with SAP GRC Access Control and/or SAP IAG. Experience in supporting hybrid SAP environments (cloud + on-premise). Preferred Qualifications include SAP certifications (Basis, Security, GRC, or BTP) and knowledge of SAP Cloud ALM or Solution Manager.

SAP Basis Administration & Operations: lead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, troubleshooting, transports, system refreshes, upgrades, patches, and kernel updates; monitor system health, batch jobs, logs, interfaces, RFCs, and database performance; coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance. SAP Security & Authorization: design and maintain SAP roles and authorization structures; manage user provisioning, role assignments, and authorization troubleshooting; conduct user access reviews, emergency access (firefighter), remediation activities; provide audit evidence, access reports, and compliance documentation. SAP GRC & Access Governance: configure and support SAP GRC modules (ARA, ARM, EAM, BRM); manage SoD rules, risk analysis, mitigation controls, and workflows; support SAP IAG for cloud-based access governance across SAP SaaS applications; lead periodic access certifications and audit remediation activities. SAP Cloud Security (BTP, IAS, IPS, Work Zone): administer SAP BTP subaccounts, role collections, destinations, and trust configurations; configure IAS for SSO, identity federation, and authentication policies; manage IPS for user and role provisioning across SAP systems; support Work Zone access control and launchpad content configuration. SAP Application Security (MDG, Ariba, SuccessFactors): manage security and access controls across SAP MDG, Ariba, and SuccessFactors; ensure secure integration between SAP S/4HANA and cloud systems; support role design, provisioning, and access troubleshooting for business users. Identity & Integration Security: design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration; manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps); troubleshoot federation, certificates, tokens, and login failures. Compliance, Audit & Operations: ensure adherence to internal security policies, audit requirements, and cybersecurity standards; support audits with system logs, access controls, and compliance evidence; participate in incident, change, and problem management processes; prepare technical documentation and operational procedures.