SAP Security Lead

The SAP Security Lead will manage and maintain the security of the SAP landscape, including user access, roles, authorizations, and compliance with organizational security policies. The role involves collaborating with business and IT teams to ensure SAP systems integrity, confidentiality, and regulatory compliance while driving security best practices and awareness across the organization.

Key Responsibilities:

• User and Role Administration:

• Administer SAP user accounts, roles, and authorizations.
• Create, modify, and deactivate accounts based on business requirements and employee lifecycle changes.

• Role Design and Maintenance:

• Design and maintain SAP security roles in alignment with business processes and compliance requirements.
• Collaborate with business process owners and IT teams to ensure proper role assignments.

• Authorization Management:

• Define and manage authorizations to ensure users have appropriate access levels.
• Conduct regular reviews and audits of user authorizations to mitigate security risks.

• Security Policy Enforcement:

• Enforce security policies, procedures, and standards in line with organizational and industry best practices.
• Collaborate with compliance teams to ensure adherence to regulatory requirements.

• Security Monitoring and Incident Response:

• Monitor SAP security logs and alerts to identify potential security incidents.
• Work with the incident response team to investigate and resolve security breaches or vulnerabilities.

• User Training and Awareness:

• Provide training on SAP security best practices and policies.
• Promote a security-conscious culture within the organization.

• Segregation of Duties (SoD) Analysis:

• Conduct SoD analysis to identify and mitigate access conflicts.
• Collaborate with business units to resolve identified conflicts.

• Emergency Access Management:

• Manage emergency access procedures and logs.
• Ensure emergency access is granted and monitored in accordance with policies.

• Security Documentation and Audit Support:

• Maintain comprehensive documentation of SAP security configurations, roles, and procedures.
• Support internal and external audits by providing evidence of security controls.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Proven experience as an SAP Security Lead or in a similar role.
• Deep knowledge of SAP security concepts, including user management, role design, and authorization administration.
• Strong experience with SAP GRC (FF/EAM, SoD, Risk Analysis, Access Request).
• Experience with ITGC, SOX, and audit compliance.
• Exposure to cloud integrations (BTP, CPI, IAS/IPS, IBP).
• Familiarity with ServiceNow workflows, ticketing, and integrations.
• Knowledge of identity providers and SSO setup (Okta, SAML2, etc.).
• Understanding of regulatory requirements related to data security and privacy.
• Strong analytical, problem-solving, and interpersonal skills.
• Excellent communication and collaboration skills.