We are seeking an experienced SAP Security and GRC professional to lead the SAP Authorizations function. You will be responsible for designing, maintaining, and governing SAP role concepts across ECC, S/4HANA, BW/4HANA, and cloud platforms. This is a hands-on leadership role requiring deep technical knowledge of SAP security combined with strong stakeholder and compliance management skills.

Key Responsibilities :

SAP Roles & Authorization Management :

- Design and maintain SAP roles Single, Composite, Derived, and AGR-based roles.

- Implement authorization concepts aligned with business requirements.

- Manage user administration (SU01), role transports, and authorization troubleshooting.

- Perform SU53, SU24, ST01, SUIM, and authorization trace analysis.

- Manage security for SAP ECC, S/4HANA, BW/4HANA, and SAP Fiori.

- Design and maintain Single, Composite & Derived roles using PFCG.

- Support S/4HANA Fiori security including Catalogs, Groups, Spaces & Pages.

- Implement security best practices and audit controls.

- Enforce least-privilege and secure role design principles.

Cloud Identity & Integration :

- Manage SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).

- Manage SAML/OAuth integrations with SAP BTP and cloud applications.

SAP GRC Access Control :

- Administer SAP GRC Access Control modules : ARA, ARM, BRM, and EAM.

- Perform SoD risk analysis and implement mitigation controls.

- Configure and maintain GRC rule sets.

- Manage Firefighter IDs and monitor EAM logs.

- Configure and support access request workflows and approval configurations.

- Conduct periodic access reviews and compliance reporting.

- Integrate SAP systems with GRC Access Control.

Additional Responsibilities :

- Deputy for the SAP Security Architect and other SAP Technology colleagues as required.

- Maintain up-to-date technical knowledge to drive continuous improvement aligned with IT strategy.

- Perform additional duties commensurate with the role as directed by management.

Required Qualifications :

- 5+ years of hands-on SAP Security & GRC experience.

- Strong expertise in SAP Roles & Authorizations with PFCG role design methodology.

- Proven experience with SAP GRC Access Control.

- Experience with SAP Cloud Identity Services (IAS/IPS).

- Hands-on experience with S/4HANA and SAP Fiori authorizations.

- Strong knowledge of SoD controls and compliance frameworks.

- Experience integrating SAP with Active Directory / Azure AD.

- Understanding of SAP BTP security concepts.

- Experience in at least one S/4HANA implementation project.

- Experience in global, multi-system SAP environments.

- Strong English proficiency (spoken and written); German language skills are a significant advantage.

- Excellent communication skills, both technical and business-oriented.

- Strong analytical and problem-solving abilities; self-organized and result-oriented.

Preferred / Beneficial :

- SAP Security or GRC Certification.

- SAP BTP or Cloud Identity Certification.

- Experience in the manufacturing industry.

Tech Stack :

- SAP Roles & Authorizations Administration