Specialist, SAP Security

ROLE SUMMARY:

The Specialist, SAP Security is responsible for managing and governing SAP security, authorizations, access

controls, segregation of duties (SoD), compliance, audit support, identity management, and security

governance across SAP ECC, SAP S/4HANA, SAP SuccessFactors, SAP Ariba, SAP Sales Cloud, and

integrated enterprise applications. The role ensures secure access management, regulatory compliance, data

confidentiality, integrity, and availability while supporting internal controls, risk management, cybersecurity

requirements, and digital transformation initiatives.

ROLES & RESPONSIBILITIES:

• Administer and maintain SAP security roles, profiles, authorizations, and user access across SAP ECC,

SAP S/4HANA, SuccessFactors, Ariba, Sales Cloud, and related platforms.

• Design, implement, and maintain role-based access controls in accordance with business requirements

and security best practices.

• Perform Segregation of Duties (SoD) analysis, risk assessments, remediation activities, and access

conflict reviews.

• Manage user provisioning, de-provisioning, privileged access, emergency access, and periodic access

recertification activities.

• Support integration of SAP security with Active Directory (AD), Azure AD, Single Sign-On (SSO),

Identity Management, and other authentication platforms.

• Monitor and enforce compliance with company policies, audit requirements, cybersecurity standards, and

regulatory obligations.

• Conduct periodic access reviews and ensure appropriate approval workflows and governance controls are

maintained.

• Support internal and external audits by preparing audit evidence, responding to audit inquiries, and

implementing corrective actions.

• Assess security impacts of SAP projects, enhancements, upgrades, migrations, and digital transformation

initiatives.

• Coordinate with SAP functional teams, Basis, Infrastructure, Cybersecurity, Compliance, Internal Audit,

and external partners to implement secure solutions.

• Monitor security vulnerabilities, authorization risks, access violations, and compliance issues and

recommend corrective actions.

• Develop and maintain security standards, procedures, role design documentation, access matrices, and

governance frameworks.

• Support data protection, confidentiality, integrity, and security controls across SAP and integrated

business applications.

• Identify opportunities to strengthen governance, automate security processes, reduce risk exposure, and

improve audit readiness.

QUALIFICATION & EDUCATION:

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, Information Systems, or

a related field. SAP Security, SAP GRC, Cybersecurity, CISA, CISSP, or related certifications are

preferred.

EXPERIENCE:

• Minimum 5 years of experience in SAP Security, SAP Authorization Management, SAP GRC, Access

Governance, Compliance, and Audit Support. Experience with SAP ECC, SAP S/4HANA,

SuccessFactors, SAP Ariba, SAP Sales Cloud, Identity Management, Single Sign-On, and Active

Directory integrations is preferred.

• Good knowledge of FICO, MM, SD, PP, QM, HR, PM, BW, SAP Basis concepts, system integrations, and

end-to-end business processes.

SKILLS:

• Strong knowledge of SAP Security, SAP GRC, Access Governance, Segregation of Duties (SoD), audit

compliance, identity management, and system integrations.

• Strong analytical, troubleshooting, risk assessment, compliance management, and documentation skills.

• Excellent communication and interpersonal skills, with the ability to collaborate effectively with

stakeholders at all levels.

• SAP Security, SAP GRC, CISA, CISSP, or relevant security certifications preferred.

• Experience with SAP ECC, SAP S/4HANA, SuccessFactors, SAP Ariba, SAP Sales Cloud, Active

Directory integration, audit management, and access governance is an advantage.