Specialist, SAP Security

ROLE SUMMARY: The Specialist, SAP Security is responsible for managing and governing SAP security, authorizations, access controls, segregation of duties (SoD), compliance, audit support, identity management, and security governance across SAP ECC, SAP S/4HANA, SAP SuccessFactors, SAP Ariba, SAP Sales Cloud, and integrated enterprise applications. The role ensures secure access management, regulatory compliance, data confidentiality, integrity, and availability while supporting internal controls, risk management, cybersecurity requirements, and digital transformation initiatives. ROLES & RESPONSIBILITIES: • Administer and maintain SAP security roles, profiles, authorizations, and user access across SAP ECC, SAP S/4HANA, SuccessFactors, Ariba, Sales Cloud, and related platforms. • Design, implement, and maintain role-based access controls in accordance with business requirements and security best practices. • Perform Segregation of Duties (SoD) analysis, risk assessments, remediation activities, and access conflict reviews. • Manage user provisioning, de-provisioning, privileged access, emergency access, and periodic access recertification activities. • Support integration of SAP security with Active Directory (AD), Azure AD, Single Sign-On (SSO), Identity Management, and other authentication platforms. • Monitor and enforce compliance with company policies, audit requirements, cybersecurity standards, and regulatory obligations. • Conduct periodic access reviews and ensure appropriate approval workflows and governance controls are maintained. • Support internal and external audits by preparing audit evidence, responding to audit inquiries, and implementing corrective actions. • Assess security impacts of SAP projects, enhancements, upgrades, migrations, and digital transformation initiatives. • Coordinate with SAP functional teams, Basis, Infrastructure, Cybersecurity, Compliance, Internal Audit, and external partners to implement secure solutions. • Monitor security vulnerabilities, authorization risks, access violations, and compliance issues and recommend corrective actions. • Develop and maintain security standards, procedures, role design documentation, access matrices, and governance frameworks. • Support data protection, confidentiality, integrity, and security controls across SAP and integrated business applications. • Identify opportunities to strengthen governance, automate security processes, reduce risk exposure, and improve audit readiness. QUALIFICATION & EDUCATION: • Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information Systems, or a related field. SAP Security, SAP GRC, Cybersecurity, CISA, CISSP, or related certifications are preferred. EXPERIENCE: • Minimum 5 years of experience in SAP Security, SAP Authorization Management, SAP GRC, Access Governance, Compliance, and Audit Support. Experience with SAP ECC, SAP S/4HANA, SuccessFactors, SAP Ariba, SAP Sales Cloud, Identity Management, Single Sign-On, and Active Directory integrations is preferred. • Good knowledge of FICO, MM, SD, PP, QM, HR, PM, BW, SAP Basis concepts, system integrations, and end-to-end business processes. SKILLS: • Strong knowledge of SAP Security, SAP GRC, Access Governance, Segregation of Duties (SoD), audit compliance, identity management, and system integrations. • Strong analytical, troubleshooting, risk assessment, compliance management, and documentation • Excellent communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels. • SAP Security, SAP GRC, CISA, CISSP, or relevant security certifications preferred. • Experience with SAP ECC, SAP S/4HANA, SuccessFactors, SAP Ariba, SAP Sales Cloud, Active Directory integration, audit management, and access governance is an advantage.

Minimum 5 years of experience in SAP Security, SAP Authorization Management, SAP GRC, Access Governance, Compliance, and Audit Support. Experience with SAP ECC, SAP S/4HANA, SuccessFactors, SAP Ariba, SAP Sales Cloud, Identity Management, Single Sign-On, and Active Directory integrations is preferred. Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information Systems, or a related field. SAP Security, SAP GRC, Cybersecurity, CISA, CISSP, or related certifications are preferred.

Administer and maintain SAP security roles, profiles, authorizations, and user access across SAP ECC, SAP S/4HANA, SuccessFactors, Ariba, Sales Cloud, and related platforms. Design, implement, and maintain role-based access controls in accordance with business requirements and security best practices. Perform Segregation of Duties (SoD) analysis, risk assessments, remediation activities, and access conflict reviews. Manage user provisioning, de-provisioning, privileged access, emergency access, and periodic access recertification activities. Support integration of SAP security with Active Directory (AD), Azure AD, Single Sign-On (SSO), Identity Management, and other authentication platforms. Monitor and enforce compliance with company policies, audit requirements, cybersecurity standards, and regulatory obligations. Conduct periodic access reviews and ensure appropriate approval workflows and governance controls are maintained. Support internal and external audits by preparing audit evidence, responding to audit inquiries, and implementing corrective actions. Assess security impacts of SAP projects, enhancements, upgrades, migrations, and digital transformation initiatives. Coordinate with SAP functional teams, Basis, Infrastructure, Cybersecurity, Compliance, Internal Audit, and external partners to implement secure solutions. Monitor security vulnerabilities, authorization risks, access violations, and compliance issues and recommend corrective actions. Develop and maintain security standards, procedures, role design documentation, access matrices, and governance frameworks. Support data protection, confidentiality, integrity, and security controls across SAP and integrated business applications. Identify opportunities to strengthen governance, automate security processes, reduce risk exposure, and improve audit readiness.