Responsibilities

  • Design, build, and maintain SAP security roles and authorization concepts using SAP PFCG, including Single, Composite, Derived, and Master Roles.
  • Perform user administration activities such as user provisioning, role assignments, password resets, account management, and user lifecycle administration.
  • Troubleshoot authorization issues using SU53, ST01, STAUTHTRACE, SUIM, and related security tools while minimizing business disruption.
  • Design role structures based on least privilege principles and SAP security best practices to strengthen enterprise access control.
  • Conduct Segregation of Duties (SoD) analysis and remediation using SAP GRC Access Control, including ARM, ARA, BRM, Firefighter ID, and Emergency Access Management (Firefighter IDs).
  • Collaborate with business users, consultants, BASIS teams, and auditors to define security requirements and support SAP implementations, upgrades, migrations, and S/4HANA projects.
  • Configure and maintain SAP Fiori security, including catalogs, groups, spaces, pages, gateway authorizations, and Identity Management integrations where applicable.
  • Support audit, governance, and compliance initiatives by performing access reviews, role recertification, security monitoring, maintaining security documentation.
  • Ensure compliance with SOX, GDPR, ISO 27001, and organizational policies.
  • Manage security transports, production support, authorization testing, security incident resolution.
  • Mentor junior consultants while driving continuous improvements to SAP security processes.


Relevant Jobs