Responsibilities
1. SAP Security & Access Control: • Manage and monitor the SAP security landscape, ensuring the appropriate configuration and implementation of security policies across critical systems (SAP S/4HANA, SAP BW, SAP Business Objects, SAP BTP). • Oversee user roles, authorizations, and profile management to ensure compliance with corporate security policies and SAP best practices. • Implement and manage SAP GRC Access Control, ensuring secure access across SAP systems while preventing unauthorized access and ensuring compliance with regulatory standards. • Collaborate with other departments to define and enforce access control policies and procedures across SAP landscapes. 2. Segregation of Duties (SoD) Management: • Lead and manage Segregation of Duties (SoD) assessments to identify conflicts within SAP roles and authorizations. • Conduct regular reviews of SoD violations and propose remediation plans to eliminate conflicts in user access and roles. • Use SAP GRC Access Control or other relevant tools to monitor and mitigate SoD violations, ensuring compliance with organizational and regulatory standards. 3. Audit & Compliance Management: • Manage and support IT General Controls (ITGC) audits and assist in the preparation of security and audit documentation for internal and external audits. • Ensure all SAP systems meet the necessary compliance requirements, including SOX, GDPR, and other industry-specific regulations. • Provide guidance and support during security audits, responding to audit queries and implementing necessary corrective actions based on audit findings. • Ensure the integrity and confidentiality of SAP data and comply with internal policies and regulatory standards related to data security and privacy. 4. Risk Management & Security Governance: • Develop and implement security strategies, policies, and frameworks to ensure the protection of SAP systems and data. • Monitor and respond to potential security threats or vulnerabilities within the SAP environment. • Oversee security patch management, system monitoring, and vulnerability assessments. • Provide continuous improvement recommendations for security controls based on the evolving threat landscape.
Technical Requirements
Required Skills & Qualifications: • Proven experience in managing SAP security, particularly in the context of SAP S/4HANA, SAP BW, SAP Business Objects, and SAP BTP. • Strong expertise in SAP GRC Access Control, including role management, SoD assessments, and access reviews. • In-depth knowledge of Segregation of Duties (SoD) management, including the identification and resolution of SoD violations. • Solid understanding of IT General Controls (ITGC), SOX compliance, and other regulatory standards related to IT security and access management. • Experience with SAP audit preparation and support, including responding to internal and external audit findings. • Strong problem-solving and troubleshooting skills in SAP security and access control issues. • Ability to work cross-functionally and manage multiple projects simultaneously. • Strong leadership, communication, and interpersonal skills.
Preferred Skills
Technology->SAP Functional->SAP GRC
Technology->SAP Technical->SAP HANA
Technology->SAP Technical->SAP Security
Technology->Cloud Security->GCP - GRC
Additional Responsibilities
Education & Experience: • 5+ years of experience in SAP Security
Educational Requirements
Bachelor of Engineering