SAP Security & Authorization Consultant

Our client operates a complex SAP system landscape spanning both on-premise and public cloud solutions (SAP ECC, SAP S/4 Public Cloud, SAP BW/4HANA, SAC, IBP, Ariba). As part of ongoing projects and daily operations, they are looking for an experienced SAP Security & Authorization Consultant to act as system owner for SAP GRC and take responsibility for security and authorization processes across all relevant SAP systems. The position is internationally oriented, with work locations in Zurich (CH) and Katowice (PL), and predominantly remote.

• Responsible for all SAP on-premise and public cloud-based systems in terms of authorization and security management (SAP ECC, SAP S/4 Public Cloud, SAP BW/4HANA, SAC, IBP, Ariba)
• IT system owner for the SAP GRC system(s) and the implemented processes for access management and FireFighter processes
• Manage and maintain system security, including user roles, authorizations, and password policies, while ensuring segregation of duties (SoD) compliance for all relevant SAP systems
• Design, implement and secure SAP roles and authorization models tailored to business needs
• Ensure SAP systems meet standards such as SOX, GDPR, and ISO27K, and collaborate with auditors for documentation and compliance reviews (access and role reviews)
• Serve as the main contact for SAP-related security incidents, efficiently resolving them, and conducting thorough investigations with proper documentation and follow-up actions
• Support 1st level support for day-to-day operations in the user access management process, providing guidance on best-practice use of GRC processes
• Work on SAP projects representing the security stream (SAP rollouts & large company projects)
• Create and maintain SOPs for all relevant SAP systems
• Contribute to the internal IT control framework by providing the required data for testing ITGC in the SAP security and authorization area
• Provide training to global and local business users on SAP GRC processes

Personality

• Functional security and authorization consultant with hands-on system experience
• Understands the business context of the position and proactively works with different business counterparts
• Open personality who enjoys working in an international and distributed team setup
• Service- and solution-oriented, eager to learn new topics
• Works independently within the team and is willing to go the extra mile when required
• Good communication and organizational skills
• Excellent command of spoken and written English (German is a plus)
• Willing to handle projects and support activities in parallel
• Experience with problem-solving situations, including approaches, tools, and tactics used to manage effective outcomes

Professional Competence

• Minimum 5–10 years' experience as a functional SAP security and authorization consultant
• Strong knowledge of SAP system architecture, including SAP Basis/BTP, SAP S/4HANA, SAP ECC
• Strong experience working with SAP GRC/IAG systems
• Strong experience managing users, roles in SAP ECC and S/4, profiles, and security in SAP
• Familiarity with regulatory frameworks such as SOX, ISO27K, or similar compliance standards
• Experience with SAP system audits and security assessments
• Good understanding of end-to-end SAP processes such as procure-to-pay or order-to-cash