SAP IAM - 6 Months Contractor

INSPIRE | EXHILARATE | DELIGHT For over seven decades, Chalhoub Group has been a partner and creator of luxury experiences in the Middle East. In its pursuit to excel as a hybrid luxury retailer, the Group has curated a portfolio of over 10 owned brands and strengthened its distribution and marketing expertise for over 400 international names across luxury fashion, beauty, jewellery, watches, eyewear, and art de vivre categories. Every step at Chalhoub Group is taken to build a future where luxury dreams become reality — bridging cultures and crafting memorable experiences for our consumers. Be it by constantly reinventing itself, committing to innovation, or embracing new technologies, the Group is shaping the future of luxury retail. It delivers seamless omnichannel experiences across more than 950 stores, online platforms, and mobile apps. Driving this innovation journey is The Greenhouse — the Group’s innovation hub, incubator, and accelerator for startups and emerging businesses, regionally and globally. Chalhoub Group fosters a people-at-heart culture rooted in diversity, equity, and inclusion, and a workplace catalysed by forward thinking and future-proofing. Today, it brings together over 16,000 talented professionals across eight countries in the Middle East, with a presence in LATAM. Sustainability is at the core of the Group’s strategy, guided by a clear commitment to people, partners, and the planet. Chalhoub Group is proud to be a member of the United Nations Global Compact, a signatory of the Women’s Empowerment Principles, and to have pledged to reach Net Zero by 2040. Summary: We are in the lookout for a SAP Security SME who is currently based in Dubai and is available to join us immediately for a 6 months contract as a SAP IAM Contractor within our ERP Transform division. Technical Expertise Strong expertise in SAP role and authorization design across: - SAP S/4HANA - SAP SuccessFactors - SAP BW/4HANA - SAP Analytics Cloud (SAC) - SAP Datasphere - SAP Ariba - SAP CAR - SAP BTP Broader security knowledge in above systems are good to have. - Strong hands-on experience with: - SAP IAG (Identity Access Governance) - SAP IAS (Identity Authentication Service) - SAP IPS (Identity Provisioning Service) - Integration of SAP IAM components with SAP and non-SAP systems - HR-driven Joiner, Mover, Leaver processes and identity lifecycle automation - Joule for IAG - Experience in enterprise-scale role design, role remediation, role rationalization, and role governance programs. - Retail industry work experience is good to have Governance, Risk & Compliance - Strong knowledge of SoD concepts, SAP IAG Access Analysis, and SoD risk management. - Experience in technical design and maintenance of SoD rulesets. - Ability to analyze SoD violations and propose practical risk remediation and mitigation control designs. - Experience supporting access governance, firefighter/PAM processes, access certification, and audit requirements. Delivery & Data Quality - Advanced Excel and data analysis skills. - Strong attention to detail with ability to identify inconsistencies, errors, duplicates, and data quality issues in large role and user datasets. - Ability to independently validate inputs, challenge assumptions, and ensure integrity of role design and access governance deliverables. - Capable of driving activities with limited supervision and working across multiple parallel workstreams. - Ability to plan and define action items based on objectives to be achieve - Ability to work independetly and proactively Stakeholder Management - Ability to explain complex IAM and security concepts in business-friendly language - Ability to work effectively with business and IT teams(internal and external) - Strong documentation skills Preferred Experience - Experience with SAP RISE environments. - Implementation experience with SAP IAG and hybrid landsacpe - Experience supporting large-scale SAP transformation programs. - Experience operating in regulated or audit-driven environments. - Experience supporting go-live, hypercare, and production stabilization activities.

Technical Expertise: Strong expertise in SAP role and authorization design across SAP S/4HANA, SAP SuccessFactors, SAP BW/4HANA, SAP Analytics Cloud (SAC), SAP Datasphere, SAP Ariba, SAP CAR, SAP BTP. Broader security knowledge in above systems is good to have. Hands-on experience with SAP IAG (Identity Access Governance), SAP IAS (Identity Authentication Service), SAP IPS (Identity Provisioning Service). Integration of SAP IAM components with SAP and non-SAP systems. HR-driven Joiner, Mover, Leaver processes and identity lifecycle automation. Joule for IAG. Experience in enterprise-scale role design, role remediation, role rationalization, and role governance programs. Retail industry work experience is good to have. Governance, Risk & Compliance: SoD concepts, SAP IAG Access Analysis, SoD risk management. Technical design and maintenance of SoD rulesets. Analyze SoD violations and propose practical risk remediation and mitigation control designs. Experience supporting access governance, firefighter/PAM processes, access certification, and audit requirements. Delivery & Data Quality: Advanced Excel and data analysis skills. Attention to detail with data quality, inconsistencies, duplicates in large role and user datasets. Independently validate inputs, challenge assumptions, ensure integrity of role design and access governance deliverables. Plan and define action items; work across multiple parallel workstreams. Work independently and proactively. Stakeholder Management: Explain complex IAM and security concepts in business-friendly language. Collaborate with business and IT teams; strong documentation skills. Preferred Experience: Experience with SAP RISE environments. Implementation experience with SAP IAG and hybrid landscape. Experience supporting large-scale SAP transformation programs. Experience operating in regulated or audit-driven environments. Experience supporting go-live, hypercare, and production stabilization activities.

Design and implement SAP IAM/security architectures across multiple SAP products (S/4HANA, SuccessFactors, BW/4HANA, SAC, Datasphere, Ariba, CAR, BTP); lead role design, governance, remediation, and lifecycle automation; manage SoD risk analysis and mitigation, access governance processes (firefighter/PAM, access certifications, audits); ensure data quality and integrity of role/user datasets; collaborate with business and IT teams, document designs and deliverables, and support go-live, hypercare, and production stabilization activities.